langflow Known Vulnerabilities & Fixes
langflow has 17 known security vulnerabilities in PyPI (Python). Upgrade to version 1.10.3 or later to resolve all known issues. Data sourced from OSV, enriched with EPSS exploit probability and CISA KEV.
Actively Exploited
CISA has confirmed this package has vulnerabilities under active exploitation. Prioritize updating immediately.
Recommended safe version: 1.10.3
Upgrading to 1.10.3 or later resolves all 17 known vulnerabilities in langflow. Run: pip install "langflow>=1.10.3"
Is langflow in your project?
Check if you're affected and upgrade to 1.10.3 to stay secure.
Active Exploitation Warning
One or more vulnerabilities in this package are known to be actively exploited in the wild. Immediate action is recommended.
Security Summary
- 17 affected version ranges have been identified across these 17 advisories.
- 76% of known issues have a published fixed version.
- Remediation: pip install --upgrade langflow
Vulnerabilities
17 unique vulnerabilities — sorted by exploitation risk (KEV → EPSS → CVSS). Click a CVE/GHSA ID for full details. First disclosed Oct 31, 2024, most recently Oct 7, 2026 (706 days apart).
| CVE / GHSA | Severity | Affected | Fixed In |
|---|---|---|---|
| CVE-2026-55255 | CRITICAL | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+291 more) | 1.9.2 |
| CVE-2026-55450 Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak | CRITICAL | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+290 more) | 1.9.1 |
| CVE-2026-105697 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration | CRITICAL | 1.1.2, 1.1.3, 1.1.4, 1.1.4.post1 (+58 more) | 1.10.3 |
| CVE-2026-10561 Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation | CRITICAL | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+302 more) | 1.10.1 |
| CVE-2026-8505 Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass | CRITICAL | 1.7.0, 1.7.1, 1.7.2, 1.7.3 (+14 more) | 1.9.1 |
| CVE-2026-27966 Langflow has Remote Code Execution in CSV Agent | CRITICAL | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+279 more) | No fix available |
| CVE-2026-33017 Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint | CRITICAL | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+289 more) | 1.9.0 |
| CVE-2026-33873 Langflow has Authenticated Code Execution in Agentic Assistant Validation | CRITICAL | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+289 more) | 1.9.0 |
| CVE-2026-33309 Langflow has an Arbitrary File Write (RCE) via v2 API | CRITICAL | 1.2.0, 1.3.0, 1.3.1, 1.3.2 (+37 more) | 1.9.0 |
| CVE-2026-55447 Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit | CRITICAL | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+291 more) | 1.9.2 |
| CVE-2026-42048 Langflow Knowledge Bases API is Vulnerable to Path Traversal | CRITICAL | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+289 more) | 1.9.0 |
| CVE-2026-48519 Langflow: Unauthenticated RCE in Shareable Playgrounds | CRITICAL | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+291 more) | 1.9.2 |
| CVE-2025-3248 Langflow Unauth RCE | CRITICAL | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+249 more) | 1.3.0 |
| CVE-2024-42835 langflow has vulnerability in PythonCodeTool component | HIGH | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+233 more) | No fix available |
| CVE-2026-21445 Langflow Missing Authentication on Critical API Endpoints | HIGH | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+273 more) | 1.7.1 |
| CVE-2026-0770 Langflow affected by Remote Code Execution via validate_code() exec() | HIGH | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+276 more) | No fix available |
| CVE-2024-48061 Langflow vulnerable to remote code execution | MEDIUM | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+239 more) | No fix available |
About This Data
Vulnerability data for langflow is sourced from the Open Source Vulnerability (OSV) database, aggregating reports from GitHub Advisory Database, NIST NVD, and ecosystem-specific sources.
CVSS (Common Vulnerability Scoring System) scores reflect exploitability and impact. EPSS (Exploit Prediction Scoring System) scores indicate the probability of exploitation within the next 30 days. Vulnerabilities marked with are listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.
Related PyPI (Python) Packages
Other packages in this ecosystem, ranked by shared vulnerabilities where available.
Check Your Dependencies
Scan your project to check if you're using a vulnerable version of langflow.