https://exploit-radar.com/en/flux/marques/langflow.xml Exploit Radar: exploited Langflow vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for Langflow products. 2026-08-04T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-9198/ CVE-2026-9198 — Langflow 2026-08-04T00:00:00Z Apply the patches or mitigations from Langflow; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 4, 2026. https://exploit-radar.com/en/cve/CVE-2026-0770/ CVE-2026-0770 — Langflow 2026-07-21T00:00:00Z Apply the patches or mitigations from Langflow; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 21, 2026. https://exploit-radar.com/en/cve/CVE-2026-55255/ CVE-2026-55255 — Langflow 2026-07-07T00:00:00Z Apply the patches or mitigations from Langflow; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 7, 2026. https://exploit-radar.com/en/cve/CVE-2025-34291/ CVE-2025-34291 — Langflow 2026-05-21T00:00:00Z Apply the patches or mitigations from Langflow; if none are available, stop using the product. For cloud services, follow the guidance from Langflow. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 21, 2026. https://exploit-radar.com/en/cve/CVE-2026-33017/ CVE-2026-33017 — Langflow 2026-03-25T00:00:00Z Apply the patches or mitigations from Langflow; if none are available, stop using the product. For cloud services, follow the guidance from Langflow. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2026. https://exploit-radar.com/en/cve/CVE-2025-3248/ CVE-2025-3248 — Langflow 2025-05-05T00:00:00Z Apply the patches or mitigations from Langflow; if none are available, stop using the product. For cloud services, follow the guidance from Langflow. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on May 5, 2025.