Langflow Vulnerabilities
29 vulnerabilities related to Langflow
- 2026-08-14Langflow /api/v1/custom_component 代码执行漏洞（CVE-2024-37014）
- PoC2026-08-05CVE-2024-37014: Langflow <= 1.0.12 - Remote Code Execution
- PoC2026-08-03CVE-2026-55450: Langflow < 1.9.1 - Unauthenticated File Upload
- PoC2026-07-31CVE-2026-33497: Langflow < 1.7.0 - Path Traversal
- PoC2026-07-31CVE-2026-9198: IBM Langflow - Remote Code Execution
- 2026-07-03Langflow build_public_tmp 代码执行漏洞（CVE-2026-33017）
- PoC2026-06-17CVE-2026-5027: Langflow <= 1.8.4 - Path Traversal to RCE via File Upload
- 2026-06-12Langflow /api/v2/files 文件上传漏洞（CVE-2026-5027）
- 2026-05-15Langflow /api/v1/validate/code 代码执行漏洞（CVE-2026-0770）
- PoC2026-05-09CVE-2026-33017: Langflow < 1.9.0 - Remote Code Execution
- PoC2026-04-17Langflow /api/v1/auto_login 未授权访问漏洞
- 2026-04-15Langflow 存在任意文件写入漏洞（CVE-2026-33309）
- 2026-04-13Langflow validate/code 存在授权远程代码执行漏洞（CVE-2026-0770）
- PoC2026-04-09CVE-2026-21445: Langflow - Broken Access Control
- 2026-03-27Langflow /api/v1/files/profile_pictures/../secret_key 文件读取漏洞（CVE-2026-33497）
- 2026-03-20Langflow auto_login 存在 access token 泄露漏洞
- 2026-03-20Langflow 存在远程代码执行漏洞（CVE-2026-33017）
- 2026-03-13Langflow /api/v1/login 默认口令漏洞
- 2026-03-12Langflow /api/v1/login 默认口令漏洞
- 2026-03-02Langflow CSV Agent 未授权 代码注入漏洞
- PoC2026-02-24CVE-2026-0770: Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()
- PoC2026-01-08CVE-2025-34291: Langflow AI <= 1.6.9 - CORS Misconfiguration
- 2025-12-19Langflow Langflow 权限管理不当漏洞
- 2025-12-19Langflow Langflow 权限管理不当漏洞
- 2025-12-05Langflow /api/v1/files/profile_pictures/../langflow.db 目录遍历漏洞
- 2025-12-05Langflow /api/v1/files/profile_pictures/../langflow.db 目录遍历漏洞
- PoC2025-08-01CVE-2025-3248: Langflow AI - Unauthenticated Remote Code Execution
- 2025-04-09Langflow /api/v1/validate/code 代码执行漏洞（CVE-2025-3248）
- 2025-04-09Langflow /api/v1/validate/code 代码执行漏洞（CVE-2025-3248）