{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Langflow vulnerabilities","home_page_url":"https://patchfirst.co/vendor/langflow/","feed_url":"https://patchfirst.co/feed/vendor/langflow.json","description":"New and newly exploited Langflow CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-0770#kev","url":"https://patchfirst.co/cve/CVE-2026-0770/","title":"[KEV] CVE-2026-0770: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability","content_text":"Langflow · Langflow. In CISA KEV since 2026-07-21. ENISA EUVD lists it as exploited. EPSS 62.6% (higher than 99.19% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.7 of 100.","summary":"Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability","date_published":"2026-07-21T00:00:00.000Z","date_modified":"2026-07-22T05:17:08.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":74.7,"kev":{"dateAdded":"2026-07-21","ransomware":false},"epss":{"score":0.62562,"percentile":0.99188},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0"},"vendor":"Langflow","product":"Langflow","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-55255#kev","url":"https://patchfirst.co/cve/CVE-2026-55255/","title":"[KEV] CVE-2026-55255: Langflow Authorization Bypass Through User-Controlled Key Vulnerability","content_text":"Langflow · Langflow. In CISA KEV since 2026-07-07. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 59.2% of CVEs). CVSS 8.4 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 65.7 of 100.","summary":"Langflow Authorization Bypass Through User-Controlled Key Vulnerability","date_published":"2026-07-07T00:00:00.000Z","date_modified":"2026-10-25T23:10:00.000Z","tags":["kev","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":65.7,"kev":{"dateAdded":"2026-07-07","ransomware":false},"epss":{"score":0.00887,"percentile":0.59248},"cvss":{"score":8.4,"severity":"HIGH","version":"3.1"},"vendor":"Langflow","product":"Langflow","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-34291#kev","url":"https://patchfirst.co/cve/CVE-2025-34291/","title":"[KEV] CVE-2025-34291: Langflow Origin Validation Error Vulnerability","content_text":"Langflow · Langflow. In CISA KEV since 2026-05-21. ENISA EUVD lists it as exploited. EPSS 92.8% (higher than 99.83% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 78.0 of 100.","summary":"Langflow Origin Validation Error Vulnerability","date_published":"2026-05-21T00:00:00.000Z","date_modified":"2026-10-15T21:10:00.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":78,"kev":{"dateAdded":"2026-05-21","ransomware":false},"epss":{"score":0.92808,"percentile":0.99829},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Langflow","product":"Langflow","techniqueIds":["T1190","T1059"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-33017#kev","url":"https://patchfirst.co/cve/CVE-2026-33017/","title":"[KEV] CVE-2026-33017: Langflow Code Injection Vulnerability","content_text":"Langflow · Langflow. In CISA KEV since 2026-03-25. ENISA EUVD lists it as exploited. EPSS 96.2% (higher than 99.88% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.8 of 100.","summary":"Langflow Code Injection Vulnerability","date_published":"2026-03-25T00:00:00.000Z","date_modified":"2026-06-17T10:36:47.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":74.8,"kev":{"dateAdded":"2026-03-25","ransomware":false},"epss":{"score":0.96177,"percentile":0.99877},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Langflow","product":"Langflow","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-0768","url":"https://patchfirst.co/cve/CVE-2026-0768/","title":"CVE-2026-0768: Langflow code Code Injection Remote Code Execution Vulnerability","content_text":"Langflow · Langflow. Not in CISA KEV. EPSS 28.1% (higher than 98.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 79.1 of 100.","summary":"Langflow code Code Injection Remote Code Execution Vulnerability","date_published":"2026-01-23T00:00:00.000Z","date_modified":"2026-02-26T14:44:27.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":79.1,"kev":null,"epss":{"score":0.2805,"percentile":0.98104},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0"},"vendor":"Langflow","product":"Langflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-0769","url":"https://patchfirst.co/cve/CVE-2026-0769/","title":"CVE-2026-0769: Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability","content_text":"Langflow · Langflow. Not in CISA KEV. EPSS 41.2% (higher than 98.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 73.2 of 100.","summary":"Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability","date_published":"2026-01-23T00:00:00.000Z","date_modified":"2026-02-26T14:44:26.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":73.2,"kev":null,"epss":{"score":0.41152,"percentile":0.98663},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0"},"vendor":"Langflow","product":"Langflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-3248#kev","url":"https://patchfirst.co/cve/CVE-2025-3248/","title":"[KEV] CVE-2025-3248: Langflow Missing Authentication Vulnerability","content_text":"Langflow · Langflow. In CISA KEV since 2025-05-05, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter. Priority 79.9 of 100.","summary":"Langflow Missing Authentication Vulnerability","date_published":"2025-05-05T00:00:00.000Z","date_modified":"2026-10-08T16:16:52.000Z","tags":["kev","ransomware","public-exploit","T1059"],"_patchfirst":{"reason":"kev","priority":79.9,"kev":{"dateAdded":"2025-05-05","ransomware":true},"epss":{"score":0.99993,"percentile":0.99987},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Langflow","product":"Langflow","techniqueIds":["T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}