Langflow CVEs
Every Langflow vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.
2 CVEs
EPSSCoverage
9.3CVSS 4.0
CVE-2026-33017
Exploited
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
Langflow
EPSS
96%
3 stories
4 months ago
9.8CVSS 3.1
CVE-2025-3248
Exploited Ransomware
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
Langflow
EPSS
>99.9%
4 stories
4 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.