Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

Langflow: actively exploited vulnerabilities

6 vulnerabilities in Langflow products (Langflow) are in CISA’s catalog of exploited vulnerabilities, 3 of them added in the last 90 days. Last added: August 4, 2026.

Langflow security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Langflow category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Langflow 6 vulnerabilities · AI and automation

Names used by CISA: IBM, Langflow. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Langflow list.

  1. Rank 1Langflow

    CVE-2026-9198

    Hunt for compromise (CISA)

    IBM Langflow Code Injection Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Aug 4, 2026
    CISA deadline
    3 days
    CVSS severity
    9.8 (critical)

  2. Rank 2Langflow

    CVE-2026-0770

    Hunt for compromise (CISA)

    Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jul 21, 2026
    CISA deadline
    3 days
    CVSS severity
    9.8 (critical)

  3. Rank 3Langflow

    CVE-2026-33017

    Langflow Code Injection Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 25, 2026
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  4. Rank 4Langflow

    CVE-2025-34291

    Langflow Origin Validation Error Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    May 21, 2026
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  5. Rank 5Langflow

    CVE-2026-55255

    Hunt for compromise (CISA)

    Langflow Authorization Bypass Through User-Controlled Key Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jul 7, 2026
    CISA deadline
    3 days
    CVSS severity
    8.4 (high)

  6. Rank 6Langflow

    CVE-2025-3248

    Ransomware

    Langflow Missing Authentication Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 5, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

Follow and verify

Get new Langflow vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.