Vulnerabilities by vendor · updated on every deploy
Langflow vulnerabilities: exploited CVEs and our analysis
Langflow has 5 vulnerabilities in CISA's Known Exploited Vulnerabilities catalog, 4 of them added in the last 12 months and 1 known to be used in ransomware campaigns. Below: the 3 analyses Zero Hunt Research published on Langflow products, then the catalog entries newest first with the federal due date.
CISA catalog version 2026.10.21, released 2026-10-21 14:04 UTC.
5
CVEs in CISA KEV
4
Added in the last 12 months
1
Known ransomware use
3
Zero Hunt analyses
Products with the most KEV entries: Langflow (5)
Our analysis of Langflow vulnerabilities
2026-09-01
Langflow CVE-2026-0768: One Endpoint Turns Your AI Stack Into an Attacker's Python ShellCVE-2026-0768 gives unauthenticated attackers root-level Python on exposed Langflow servers — and they are already harvesting OpenAI and AWS keys. Why the AI stack is the soft target.
2026-08-13
Langflow CVE-2026-9198: Unauthenticated RCE in Your AI Agent Control PlaneCVE-2026-9198 gives unauthenticated attackers full RCE on default Langflow. Exploitation started 11 days before the patch and is still live. Here is the fix runbook.
2026-07-08
JADEPUFFER: Agentic Ransomware That Ran the Whole Attack ItselfJADEPUFFER is the first documented agentic ransomware — an AI agent ran recon, pivot, and encryption end-to-end, fixing a failed login in 31 seconds. Here is the runbook.
All 5 KEV entries
| Added | CVE | Product and vulnerability | Federal due date | Flags | Our analysis |
|---|---|---|---|---|---|
| 2026-07-21 | CVE-2026-0770 | Langflow Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations. | 2026-07-24 | Forensic triage | — |
| 2026-07-07 | CVE-2026-55255 | Langflow Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request. | 2026-07-10 | Forensic triage | — |
| 2026-05-21 | CVE-2025-34291 | Langflow Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-… | 2026-06-04 | — | |
| 2026-03-25 | CVE-2026-33017 | Langflow Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication. | 2026-04-08 | — | |
| 2025-05-05 | CVE-2025-3248 | Langflow Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests. | 2025-05-26 | Ransomware | — |
Source: CISA Known Exploited Vulnerabilities catalog (public data). Descriptions are CISA's, shortened. Always check the vendor advisory before acting. cisa.gov
Before you patch: three checks
- 01Match the exact version and configuration you run against the vendor advisory. Owning the product is not the same as being exposed.
- 02Check reachability: an exploited flaw on an interface reachable from the internet, or from a compromised workstation, moves to the front of the queue.
- 03Where CISA flags forensic triage, hunt for compromise as well as patch: a fix does not remove an attacker who got in before it.
Questions
How many Langflow vulnerabilities are in the CISA KEV catalog?
5 in catalog version 2026.10.21, the first added on 2025-05-05 and the most recent on 2026-07-21. 4 were added in the last 12 months.
Which Langflow products have the most exploited vulnerabilities?
By KEV entries: Langflow (5).
Are Langflow vulnerabilities used in ransomware attacks?
CISA marks 1 of the 5 Langflow entries as known to be used in ransomware campaigns. The table flags them.
Is the next Langflow CVE exploitable on your network?
A KEV entry says a vulnerability is exploited somewhere. Zero Hunt answers whether it is exploitable in your environment: an autonomous AI red team on an on-premise appliance, running on private AI, black-box or gray-box, with a human approving every step that matters.
Other vendors: Cisco · Microsoft · Fortinet · Linux kernel · Citrix · GitLab · Adobe · Palo Alto Networks · Check Point · Arista · Oracle · SonicWall · Ivanti · VMware · Zimbra · SAP · Atlassian · Zyxel · Progress · F5