langflow (PyPI)
Advisories
94
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 1.10.3 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "langflow>=1.10.3"poetry
poetry add "langflow>=1.10.3"uv
uv add "langflow>=1.10.3"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-j8f7-x8jm-wmm4 Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling) |
Medium | < 1.10.3 | 1.10.3 |
| GHSA-4f6c-2vvp-gw82 Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write |
High EPSS 0.24% |
>= 1.5.0, < 1.10.3 | 1.10.3 |
| GHSA-4f6c-2vvp-gw82 Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write |
High EPSS 0.24% |
>= 1.5.0, < 1.10.3 | 1.10.3 |
| GHSA-4hmc-cfm3-w43c Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers |
High EPSS 0.31% |
>= 1.6.8, < 1.9.1 | 1.9.1 |
| GHSA-4hmc-cfm3-w43c Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers |
High EPSS 0.31% |
>= 1.6.8, < 1.9.1 | 1.9.1 |
| GHSA-gh98-4phw-6fmw Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints |
Medium EPSS 0.22% |
>= 1.0.0, < 1.10.1 | 1.10.1 |
| GHSA-gh98-4phw-6fmw Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints |
Medium EPSS 0.22% |
>= 1.0.0, < 1.10.1 | 1.10.1 |
| GHSA-w794-rj3p-xv45 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration |
Critical EPSS 1.05% |
>= 1.1.2, < 1.10.3 | 1.10.3 |
| GHSA-w794-rj3p-xv45 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration |
Critical EPSS 1.05% |
>= 1.1.2, < 1.10.3 | 1.10.3 |
| GHSA-qqw9-2vj9-hx7r Duplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description Withdrawn |
High | >= 1.7.2 | No fix yet |
| GHSA-w584-2h2r-2hvf Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description |
Critical EPSS 0.60% |
>= 1.7.2, < 1.10.1 | 1.10.1 |
| GHSA-w584-2h2r-2hvf Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description |
Critical EPSS 0.60% |
>= 1.7.2, < 1.10.1 | 1.10.1 |
| GHSA-9pw3-x84f-xcwf Duplicate Advisory: Langflow: Weak Fernet Key via random.seed() Withdrawn |
High | <= 1.10.0 | No fix yet |
| GHSA-jxw3-mjmx-3pqm Langflow: Weak Fernet Key via random.seed() |
Critical EPSS 0.30% |
< 1.10.1 | 1.10.1 |
| GHSA-jxw3-mjmx-3pqm Langflow: Weak Fernet Key via random.seed() |
Critical EPSS 0.30% |
< 1.10.1 | 1.10.1 |
| GHSA-9cc5-j3qq-69gv Duplicate Advisory: Unauthenticated Flow Execution via Webhook Authentication Bypass Withdrawn |
Critical | >= 1.7.0, <= 1.9.0 | No fix yet |
| GHSA-cf6m-vc3m-7cgm Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass |
Critical EPSS 0.87% |
>= 1.7.0, < 1.9.1 | 1.9.1 |
| GHSA-cf6m-vc3m-7cgm Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass |
Critical EPSS 0.87% |
>= 1.7.0, < 1.9.1 | 1.9.1 |
| GHSA-v798-mcc6-2m3m Langflow: Code Injection Vulnerability in Code Validation Endpoint |
Critical EPSS 1.55% |
>= 1.0.0, < 1.10.1.rc0 | 1.10.1.rc0 |
| GHSA-8qpj-27x8-pwpq Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation |
Critical EPSS 0.82% |
< 1.10.1 | 1.10.1 |
| GHSA-8qpj-27x8-pwpq Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation |
Critical EPSS 0.82% |
< 1.10.1 | 1.10.1 |
| GHSA-ccv6-r384-xp75 Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit |
Critical EPSS 0.66% |
< 1.9.2 | 1.9.2 |
| GHSA-ccv6-r384-xp75 Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit |
Critical EPSS 0.66% |
< 1.9.2 | 1.9.2 |
| GHSA-qwqc-p3q8-wcg9 Langflow: Unauthenticated DoS through multipart form boundary file upload |
High EPSS 0.58% |
< 1.0.19 | 1.0.19 |
| GHSA-qwqc-p3q8-wcg9 Langflow: Unauthenticated DoS through multipart form boundary file upload |
High EPSS 0.58% |
< 1.0.19 | 1.0.19 |
| GHSA-7hw8-6q6r-4276 Langflow: Logout button does not clear session |
Medium EPSS 0.22% |
< 1.7.0 | 1.7.0 |
| GHSA-7hw8-6q6r-4276 Langflow: Logout button does not clear session |
Medium EPSS 0.22% |
< 1.7.0 | 1.7.0 |
| GHSA-qrpv-q767-xqq2 Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow Known exploited |
High EPSS 0.89% |
< 1.9.2 | 1.9.2 |
| GHSA-qrpv-q767-xqq2 Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow Known exploited |
High EPSS 0.89% |
< 1.9.1 | 1.9.1 |
| GHSA-qrpv-q767-xqq2 Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow Known exploited |
High EPSS 0.89% |
< 1.9.1 | 1.9.1 |
| GHSA-x223-p2gf-v735 Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak |
Critical EPSS 1.19% |
< 1.9.1 | 1.9.1 |
| GHSA-x223-p2gf-v735 Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak |
Critical EPSS 1.19% |
< 1.9.1 | 1.9.1 |
| GHSA-rcjh-r59h-gq37 Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read |
Medium EPSS 0.44% |
< 1.10.0 | 1.10.0 |
| GHSA-rcjh-r59h-gq37 Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read |
Medium EPSS 0.44% |
< 1.10.0 | 1.10.0 |
| GHSA-v5ff-9q35-q26f Langflow: Unauthenticated RCE in Shareable Playgrounds |
Critical EPSS 0.78% |
< 1.9.2 | 1.9.2 |
| GHSA-v5ff-9q35-q26f Langflow: Unauthenticated RCE in Shareable Playgrounds |
Critical EPSS 0.78% |
< 1.9.2 | 1.9.2 |
| GHSA-79ph-745m-6wxq Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint |
Medium EPSS 0.47% |
< 1.9.0 | 1.9.0 |
| GHSA-79ph-745m-6wxq Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint |
Medium EPSS 0.47% |
< 1.9.0 | 1.9.0 |
| GHSA-9c59-2mvc-vfr8 Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints |
High EPSS 0.50% |
< 1.9.0 | 1.9.0 |
| GHSA-9c59-2mvc-vfr8 Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints |
High EPSS 0.50% |
< 1.9.0 | 1.9.0 |
| GHSA-9whx-c884-c68q Langflow Knowledge Bases API is Vulnerable to Path Traversal |
Critical EPSS 4.20% |
< 1.9.0 | 1.9.0 |
| GHSA-9whx-c884-c68q Langflow Knowledge Bases API is Vulnerable to Path Traversal |
Critical EPSS 4.20% |
< 1.9.0 | 1.9.0 |
| GHSA-hhxr-7j22-694r Duplicate Advisory: Prompt injection in Langflow Smart Transform can lead to code execution Withdrawn |
Medium | >= 1.3.0 | No fix yet |
| GHSA-9fpm-3445-2vx4 Langflow: Prompt injection in Langflow Smart Transform can lead to code execution |
Low EPSS 0.31% |
>= 1.3.0, < 1.10.3 | 1.10.3 |
| GHSA-9fpm-3445-2vx4 Langflow: Prompt injection in Langflow Smart Transform can lead to code execution |
Low EPSS 0.31% |
>= 1.3.0, < 1.10.3 | 1.10.3 |
| GHSA-v66p-f7x3-4794 Langflow vulnerable to injection |
Medium EPSS 0.23% |
<= 1.8.3 | No fix yet |
| GHSA-v66p-f7x3-4794 Langflow vulnerable to injection |
Medium EPSS 0.23% |
<= 1.8.3 | No fix yet |
| GHSA-9jpj-cph8-w449 Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint |
Medium EPSS 0.15% |
< 1.9.1 | 1.9.1 |
| GHSA-9jpj-cph8-w449 Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint |
Medium EPSS 0.15% |
< 1.9.1 | 1.9.1 |
| GHSA-5jjf-wcvf-923w Langflow has an Information Leak through Incomplete API Key Redaction |
Low EPSS 0.38% |
<= 1.8.3 | No fix yet |
| GHSA-5jjf-wcvf-923w Langflow has an Information Leak through Incomplete API Key Redaction |
Low EPSS 0.38% |
<= 1.8.3 | No fix yet |
| GHSA-8c4j-f57c-35cf Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check |
High EPSS 0.48% |
< 1.5.1 | 1.5.1 |
| GHSA-8c4j-f57c-35cf Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check |
High EPSS 0.48% |
< 1.5.1 | 1.5.1 |
| GHSA-v8hw-mh8c-jxfc Langflow has Authenticated Code Execution in Agentic Assistant Validation |
Critical EPSS 1.45% |
< 1.9.0 | 1.9.0 |
| GHSA-v8hw-mh8c-jxfc Langflow has Authenticated Code Execution in Agentic Assistant Validation |
Critical EPSS 1.45% |
< 1.9.0 | 1.9.0 |
| GHSA-ph9w-r52h-28p7 langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading |
High EPSS 19.58% |
< 1.7.1 | 1.7.1 |
| GHSA-ph9w-r52h-28p7 langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading |
High EPSS 19.58% |
< 1.7.1 | 1.7.1 |
| GHSA-7grx-3xcx-2xv5 langflow has Unauthenticated IDOR on Image Downloads |
High EPSS 5.94% |
>= 1.0.0, < 1.9.0 | 1.9.0 |
| GHSA-7grx-3xcx-2xv5 langflow has Unauthenticated IDOR on Image Downloads |
High EPSS 5.94% |
>= 1.0.0, < 1.9.0 | 1.9.0 |
| GHSA-g2j9-7rj2-gm6c Langflow has an Arbitrary File Write (RCE) via v2 API |
Critical EPSS 13.47% |
>= 1.2.0, < 1.9.0 | 1.9.0 |
| GHSA-g2j9-7rj2-gm6c Langflow has an Arbitrary File Write (RCE) via v2 API |
Critical EPSS 13.47% |
>= 1.2.0, < 1.9.0 | 1.9.0 |
| GHSA-rf6x-r45m-xv3w Langflow is Missing Ownership Verification in API Key Deletion (IDOR) |
High EPSS 0.40% |
< 1.9.0 | 1.9.0 |
| GHSA-rf6x-r45m-xv3w Langflow is Missing Ownership Verification in API Key Deletion (IDOR) |
High EPSS 0.40% |
< 1.9.0 | 1.9.0 |
| GHSA-vwmf-pq79-vjvx Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint Known exploited |
Critical EPSS 96.18% |
< 1.9.0 | 1.9.0 |
| GHSA-vwmf-pq79-vjvx Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint Known exploited |
Critical EPSS 96.18% |
< 1.9.0 | 1.9.0 |
| GHSA-vwmf-pq79-vjvx Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint Known exploited |
Critical EPSS 96.18% |
<= 1.8.2 | No fix yet |
| GHSA-3645-fxcv-hqr4 Langflow has Remote Code Execution in CSV Agent |
Critical EPSS 35.25% |
<= 1.8.0rc2 | No fix yet |
| GHSA-3645-fxcv-hqr4 Langflow has Remote Code Execution in CSV Agent |
Critical EPSS 35.25% |
<= 1.8.0rc2 | No fix yet |
| GHSA-g22f-v6f7-2hrh Langflow affected by Remote Code Execution via validate_code() exec() Known exploited |
High EPSS 62.56% |
<= 1.7.3 | No fix yet |
| GHSA-g22f-v6f7-2hrh Langflow affected by Remote Code Execution via validate_code() exec() Known exploited |
High EPSS 62.56% |
<= 1.7.3 | No fix yet |
| GHSA-g22f-v6f7-2hrh Langflow affected by Remote Code Execution via validate_code() exec() Known exploited |
High EPSS 62.56% |
<= 1.7.3 | No fix yet |
| GHSA-c5cp-vx83-jhqx Langflow Missing Authentication on Critical API Endpoints |
Critical EPSS 33.29% |
< 1.7.1 | 1.7.1 |
| GHSA-c5cp-vx83-jhqx Langflow Missing Authentication on Critical API Endpoints |
Critical EPSS 33.29% |
< 1.7.1 | 1.7.1 |
| GHSA-f43r-cc68-gpx4 External Control of File Name or Path in Langflow |
High EPSS 5.79% |
< 1.7.1 | 1.7.1 |
| GHSA-f43r-cc68-gpx4 External Control of File Name or Path in Langflow |
High EPSS 5.79% |
< 1.7.0 | 1.7.0 |
| GHSA-5993-7p27-66g5 Langflow vulnerable to Server-Side Request Forgery |
Medium EPSS 6.30% |
< 1.7.1 | 1.7.1 |
| GHSA-5993-7p27-66g5 Langflow vulnerable to Server-Side Request Forgery |
Medium EPSS 6.30% |
< 1.7.1 | 1.7.1 |
| GHSA-577h-p2hh-v4mv Langflow CORS misconfiguration enables Account Takeover and RCE Known exploited |
Critical EPSS 92.81% |
< 1.7.0 | 1.7.0 |
| GHSA-577h-p2hh-v4mv Langflow CORS misconfiguration enables Account Takeover and RCE Known exploited |
Critical EPSS 92.81% |
<= 1.6.9 | No fix yet |
| GHSA-577h-p2hh-v4mv Langflow CORS misconfiguration enables Account Takeover and RCE Known exploited |
Critical EPSS 92.81% |
< 1.7.0 | 1.7.0 |
| GHSA-4gv9-mp8m-592r Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE) |
High EPSS 0.54% |
< 1.5.1 | 1.5.1 |
| GHSA-4gv9-mp8m-592r Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE) |
High EPSS 0.54% |
< 1.5.0 | 1.5.0 |
| GHSA-c995-4fw3-j39m Duplicate Advisory: Langflow Vulnerable to Code Injection via the `/api/v1/validate/code` endpoint Withdrawn |
Critical | < 1.3.0 | 1.3.0 |
| GHSA-rvqx-wpfh-mfx7 Langflow Unauth RCE Known exploited |
Critical EPSS 99.99% |
< 1.3.0 | 1.3.0 |
| GHSA-rvqx-wpfh-mfx7 Langflow Unauth RCE Known exploited |
Critical EPSS 99.99% |
< 1.3.0 | 1.3.0 |
| GHSA-rvqx-wpfh-mfx7 Langflow Unauth RCE Known exploited |
Critical EPSS 99.99% |
< 1.3.0 | 1.3.0 |
| GHSA-5p5r-57fx-pmfr Langflow vulnerable to remote code execution |
Critical EPSS 1.54% |
<= 1.0.18 | No fix yet |
| GHSA-5p5r-57fx-pmfr Langflow vulnerable to remote code execution |
Critical EPSS 1.54% |
<= 1.0.18 | No fix yet |
| GHSA-56m6-4mhw-h3g5 langflow has vulnerability in PythonCodeTool component |
Critical EPSS 1.16% |
<= 1.0.12 | No fix yet |
| GHSA-56m6-4mhw-h3g5 langflow has vulnerability in PythonCodeTool component |
Critical EPSS 1.16% |
<= 1.0.12 | No fix yet |
| GHSA-355v-2rjx-fpx7 Inefficient Regular Expression Complexity in langflow |
Medium EPSS 0.96% |
<= 1.0.18 | No fix yet |
| GHSA-355v-2rjx-fpx7 Inefficient Regular Expression Complexity in langflow |
Medium EPSS 0.96% |
<= 1.0.18 | No fix yet |
| GHSA-qg33-x2c5-6p44 Langflow remote code execution vulnerability |
Critical EPSS 63.67% |
< 1.0.0a3 | 1.0.0a3 |
| GHSA-qg33-x2c5-6p44 Langflow remote code execution vulnerability |
Critical EPSS 63.67% |
< 1.0.15 | 1.0.15 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor