CVE-2026-0770Critical 9.8ExploitedLangflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability62.6%
CVE-2025-34291Critical 9.4ExploitedLangflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE93.2%
CVE-2026-0772High 7.5Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability1.2%