Langflow-Base
Langflow-AI · 3 CVEs
CVE-2026-105698
MEDIUM
Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints
Oct 5, 2026
CVE-2026-105697
CRITICAL
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Oct 5, 2026
CVE-2026-34046
HIGH
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
Mar 27, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-105698 | Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints | MEDIUM | 0.18% | Oct 5, 2026 |
| CVE-2026-105697 | Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration | CRITICAL | 0.40% | Oct 5, 2026 |
| CVE-2026-34046 | Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check | HIGH | 0.68% | Mar 27, 2026 |
Showing 1 to 3 of 3 CVEs