İçeriğe atla
Noroxi

Langflow kayıtları

langflow üreticisine ait 160 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
6 · %3,8
Silahlaştırılmış
9 · %5,6
Pre-auth RCE
29
Düzeltme kaydı olan
%15,6
Yayından KEV’e ortanca
23 gün

Yıllara göre kayıt

  1. 24
  2. 25
  3. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

160 kayıt
  • CVE-2025-3248
    99Hemen

    Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    langflow · langflow7 Nis 2025

  • CVE-2025-34291
    95Hemen

    Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE

    KritikCVSS 9,4KEVSilahlaştırılmışEPSS %93

    langflow · langflow5 Ara 2025

  • CVE-2026-0770
    88Hemen

    Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %64

    langflow · langflow23 Oca 2026

  • CVE-2026-9198
    78Bu hafta

    Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %29

    langflow · langflow17 Tem 2026

  • CVE-2026-33017
    74Bu hafta

    Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %25

    langflow · langflow20 Mar 2026

  • CVE-2026-55255
    63Bu hafta

    Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

    YüksekCVSS 8,4KEVSilahlaştırılmışEPSS %1

    langflow · langflow23 Haz 2026

  • CVE-2024-37014
    58Planlayın

    Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and p

    KritikCVSS 9,8Kavram kanıtıEPSS %64

    langflow · langflow10 Haz 2024

  • CVE-2026-0769
    49Planlayın

    Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %32

    langflow · langflow23 Oca 2026

  • CVE-2026-21445
    45Planlayın

    Langflow Missing Authentication on Critical API Endpoints

    YüksekCVSS 8,8Kavram kanıtıEPSS %33

    langflow · langflow2 Oca 2026

  • CVE-2026-0768
    42Planlayın

    Langflow code Code Injection Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    langflow · langflow23 Oca 2026

  • CVE-2024-7297
    41Planlayın

    Langflow Privilege Escalation

    YüksekCVSS 8,8İstismar yokEPSS %21

    langflow · langflow30 Tem 2024

  • CVE-2026-19295
    40Planlayın

    Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement

    KritikCVSS 9,9SilahlaştırılmışEPSS %3

    langflow · langflow28 Ağu 2026

  • CVE-2026-9103
    40Planlayın

    Unauthenticated Superuser Token Issuance via Auto-Login Endpoint

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    langflow · langflow17 Tem 2026

  • CVE-2026-27966
    40Planlayın

    Langflow has Remote Code Execution in CSV Agent

    KritikCVSS 9,8SilahlaştırılmışEPSS %2

    langflow · langflow25 Şub 2026

  • CVE-2026-10561
    40Planlayın

    Unauthenticated Remote Code Execution in Langflow OSS PythonREPLComponent via Builtins Injection

    KritikCVSS 10,0İstismar yokEPSS %1

    langflow · langflow22 Haz 2026

  • CVE-2026-10134
    40Planlayın

    Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    langflow · langflow30 Haz 2026

  • CVE-2024-48061
    39İzleyin

    langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on th

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    langflow · langflow4 Kas 2024

  • CVE-2024-42835
    39İzleyin

    langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the PythonCodeTool component.

    KritikCVSS 9,8İstismar yokEPSS %1

    langflow · langflow31 Eki 2024

  • CVE-2026-33309
    39İzleyin

    Langflow has an Arbitrary File Write (RCE) via v2 API

    KritikCVSS 9,9İstismar yokEPSS %1

    langflow · langflow24 Mar 2026

  • CVE-2026-8505
    39İzleyin

    Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow Execution

    KritikCVSS 9,8İstismar yokEPSS %1

    langflow · langflow17 Tem 2026

  • CVE-2026-8476
    39İzleyin

    Disk Cache Deserialization Remote Code Execution Vulnerability

    KritikCVSS 9,9İstismar yokEPSS %1

    langflow · langflow17 Tem 2026

  • CVE-2026-12940
    39İzleyin

    Langflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpoints

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    langflow · langflow30 Tem 2026

  • CVE-2026-7524
    39İzleyin

    Path Traversal Vulnerability in File Processing Components Allows Unauthorized File System Access and Potential Remote Code Execution

    KritikCVSS 9,8İstismar yokEPSS %1

    langflow · langflow27 May 2026

  • CVE-2026-8481
    39İzleyin

    Remote Code Execution via Code Validation Endpoint

    KritikCVSS 9,9İstismar yokEPSS %1

    langflow · langflow17 Tem 2026

  • CVE-2026-81204
    39İzleyin

    Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

    KritikCVSS 9,8İstismar yokEPSS %1

    langflow · langflow10 Eyl 2026