ZeusQA
Start free

Known exploited vulnerabilities

Langflow vulnerabilities attackers have used

Every Langflow vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 5 Langflow vulnerabilities as exploited in the wild, 4 of them added in the last 12 months and 1 used in ransomware campaigns. The most recent is CVE-2026-0770, added Jul 21, 2026. Langflow has the most entries (5).

In KEV, all time
5
Added, last 12 months
4
Used in ransomware
1
New CVEs this week
0

Every Langflow entry in CISA KEV

  1. CVE-2026-0770

    Added · due

    Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

    Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations.

  2. CVE-2026-55255

    Added · due

    Langflow Authorization Bypass Through User-Controlled Key Vulnerability

    Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.

  3. CVE-2025-34291

    Added · due

    Langflow Origin Validation Error Vulnerability

    Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that…

  4. CVE-2026-33017

    Added · due

    Langflow Code Injection Vulnerability

    Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication.

  5. CVE-2025-3248

    RansomwareAdded · due

    Langflow Missing Authentication Vulnerability

    Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works