Langflow
5 CVEs in CISA KEV — 1 with confirmed ransomware use
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2025-3248 |
Langflow | — | 0.9999 | 2025-05-05 | 2025-05-26 | RW | Langflow contains a missing authentication vulnerability in the /api/v1/validate |
CVE-2026-33017 |
Langflow | — | 0.9618 | 2026-03-25 | 2026-04-08 | Langflow contains a code injection vulnerability that could allow building publi | |
CVE-2025-34291 |
Langflow | — | 0.9281 | 2026-05-21 | 2026-06-04 | Langflow contains an origin validation error vulnerability in which an overly pe | |
CVE-2026-0770 |
Langflow | — | 0.6256 | 2026-07-21 | 2026-07-24 | Langflow contains an inclusion of functionality from untrusted control sphere vu | |
CVE-2026-55255 |
Langflow | 8.4 | 0.0089 | 2026-07-07 | 2026-07-10 | Langflow contains an authorization bypass through user-controlled key vulnerabil |