langflow-ai langflow-base

• CVE-2026-105698 Medium 5.4 Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints 0.2%
• CVE-2026-105697 Critical 9.9 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration 0.9%
• CVE-2026-34046 High 8.7 Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check 0.5%