# Langflow

Latest release: 1.13.0. Known vulnerabilities: 193. Actively exploited: 6. Vendor advisories: [https://github.com/langflow-ai/langflow/security/advisories](https://github.com/langflow-ai/langflow/security/advisories)

Check any version: https://fixedin.dev/langflow/{version}.md (for example https://fixedin.dev/langflow/1.13.0.md).

## Actively exploited

- [CVE-2026-9198](https://www.ibm.com/support/pages/node/7278927), added to CISA KEV 2026-08-04
- [CVE-2026-0770](https://www.zerodayinitiative.com/advisories/ZDI-26-036/), added to CISA KEV 2026-07-21
- [CVE-2026-55255](https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2), added to CISA KEV 2026-07-07
- [CVE-2025-34291](https://www.obsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platform), added to CISA KEV 2026-05-21
- [CVE-2026-33017](https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx), added to CISA KEV 2026-03-25
- [CVE-2025-3248](https://github.com/langflow-ai/langflow/pull/6911), added to CISA KEV 2025-05-05

Data as of: 2026-10-24 19:22 UTC

---

FixedIn gives information, not guarantees. Always confirm with the vendor's advisory before you rely on a result. Source: https://fixedin.dev/langflow · JSON: https://fixedin.dev/langflow.json · MCP server: https://fixedin.dev/mcp · About these addresses: https://fixedin.dev/llms.txt