Langflow

3 known vulnerabilities in Langflow, 3 critical, 2 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

CVE-2026-0770 CVSS 9.8 critical · actively exploited Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
CVE-2025-34291 CVSS 9.4 critical · actively exploited Langflow Origin Validation Error Vulnerability

Latest vulnerabilities

CVE-2026-0770 CVSS 9.8 critical · actively exploited Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
CVE-2026-0769 CVSS 9.8 critical Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…
CVE-2025-34291 CVSS 9.4 critical · actively exploited Langflow Origin Validation Error Vulnerability