#langflow
4 articles
Security Alerts Aug 29, 2026
CVE-2026-19295 and CVE-2026-19286: Remote Code Execution in IBM Langflow OSS
Two critical vulnerabilities in IBM Langflow OSS allow OS command execution in the server process - through a crafted flow and through an insufficiently protected public A2A endpoint...
Security Alerts Jul 21, 2026
CVE-2026-0770: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations. ...
Security Alerts Jul 7, 2026
CVE-2026-55255: Langflow Authorization Bypass Through User-Controlled Key Vulnerability
Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow...
Security Alerts Feb 5, 2026
CVE-2026-33017: Langflow Code Injection Vulnerability
Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication....