CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Langflow — security advisories

13 advisories7 exploitedlatest 2026-08-25⚡ RSS feed

Tracked Langflow products:

Langflow Langflow OSS

⚡ Watch Langflow

Get an email when a new Langflow advisory drops — max one per day, one-click unsubscribe.

[NEW] [high] Langflow OSS: Multiple Vulnerabilities

highCVE-2026-18729 CVE-2026-19286 CVE-2026-19295cert-bund2026-08-25

[NEW] [high] Langflow OSS: Multiple vulnerabilities

highCVE-2026-18891 CVE-2026-18899 CVE-2026-18904 CVE-2026-18545cert-bund2026-08-24

[NEW] [medium] Langflow: Vulnerability enables bypass of security measures and manipulation of data

mediumcert-bund2026-08-14

[NEW] [high] Langflow: Multiple vulnerabilities

highcert-bund2026-08-13

[NEW] [high] Langflow: Vulnerability Enables Code Execution

highcert-bund2026-08-05

CVE-2026-0770: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

criticalexploitedCVE-2026-0770cisa-kev2026-07-21

Langflow security advisory (AV26-670)

unknownexploitedCVE-2026-55255cccs2026-07-08

[UPDATE] [high] Langflow: Multiple vulnerabilities

highCVE-2026-12822 CVE-2026-55255 CVE-2026-55423 CVE-2026-55446cert-bund2026-07-08

CVE-2026-55255: Langflow Authorization Bypass Through User-Controlled Key Vulnerability

criticalexploitedCVE-2026-55255cisa-kev2026-07-07

GHSA-qrpv-q767-xqq2: Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

highexploitedCVSS 8.4CVE-2026-55255ghsa2026-06-19

CVE-2025-34291: Langflow Origin Validation Error Vulnerability

criticalexploitedCVE-2025-34291cisa-kev2026-05-21

CVE-2026-33017: Langflow Code Injection Vulnerability

criticalexploitedCVE-2026-33017cisa-kev2026-03-25

CVE-2025-3248: Langflow Missing Authentication Vulnerability

criticalexploitedCVE-2025-3248cisa-kev2025-05-05