Crítica
CVE-2026-105697
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 43
Restablecer filtros
Media
CVE-2026-105698
Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints
Alta
CVE-2026-105699
Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers
Alta
CVE-2026-105741
Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
Media
ghsa-j8f7-x8jm-wmm4
Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling)
Crítica
CVE-2026-10561
Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation
Crítica
CVE-2026-9205
Langflow: Weak Fernet Key via random.seed()
Crítica
CVE-2026-8505
Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass
Alta
CVE-2026-51886
Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description
Alta
CVE-2026-7700
Langflow: Prompt injection in Langflow Smart Transform can lead to code execution
Media
CVE-2026-42867
Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint
Baja
CVE-2026-6599
Langflow vulnerable to injection
Baja
CVE-2026-6598
Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint
Baja
CVE-2026-6597
Langflow has an Information Leak through Incomplete API Key Redaction
Media
CVE-2026-6596
Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API
Alta
Explotada en ataques
CVE-2026-0770
Langflow affected by Remote Code Execution via validate_code() exec()
Alta
CVE-2025-68477
Langflow vulnerable to Server-Side Request Forgery
Media
CVE-2024-48061
Langflow vulnerable to remote code execution
Media
CVE-2024-9277
Inefficient Regular Expression Complexity in langflow
Media
CVE-2026-55423
Langflow: Logout button does not clear session
Alta
Explotada en ataques
CVE-2026-55255
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
Crítica
CVE-2026-55450
Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak
Alta
CVE-2026-55446
Langflow: Unauthenticated DoS through multipart form boundary file upload
Crítica
CVE-2026-48519
Langflow: Unauthenticated RCE in Shareable Playgrounds
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.