Langflow

Products

ProductCVEsExploitedLatest
Langflow62Jan 23, 2026

Exploited and recent CVEs

  • CVE-2026-0770 Critical 9.8 Exploited Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability 62.6%
  • CVE-2025-34291 Critical 9.4 Exploited Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE 93.2%
  • CVE-2026-0772 High 7.5 Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability 1.2%
  • CVE-2026-0771 High 7.1 Langflow PythonFunction Code Injection Remote Code Execution Vulnerability 0.6%
  • CVE-2026-0769 Critical 9.8 Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability 41.2%
  • CVE-2026-0768 Critical 9.8 Langflow code Code Injection Remote Code Execution Vulnerability 28.1%