Langflow CVEs
Every Langflow vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.
2 CVEs
EPSSCoverage
8.8CVSS 3.1
CVE-2026-5027
Langflow - Path Traversal Arbitrary File Write via upload_user_file
Langflow
EPSS
41%
1 story
4 months ago
8.4CVSS 3.1
CVE-2026-55255
Exploited
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
Langflow
EPSS
0.89%
1 story
4 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.