Exploited vulnerabilities

Langflow

5 Langflow vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue5
Last 12 months4
In ransomware campaigns1
Last addition21 July 2026

The vulnerabilities5

  1. 21 July 2026CVE-2026-0770LangflowLangflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
  2. 7 July 2026CVE-2026-55255LangflowLangflow Authorization Bypass Through User-Controlled Key Vulnerability
  3. 21 May 2026CVE-2025-34291LangflowLangflow Origin Validation Error Vulnerability
  4. 25 March 2026CVE-2026-33017LangflowLangflow Code Injection Vulnerability
  5. 5 May 2025CVE-2025-3248LangflowLangflow Missing Authentication VulnerabilityRansomware

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Langflow included.

All vendorsThe catalogue on the CISA website