Langflow CVEs.
Published CVEs affecting Langflow, ranked by exploit odds.
-
CVE-2026-104324
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deserialization of untrusted data.
-
CVE-2026-104317
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.
All CVEs affecting Langflow that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.