---
title: "Langflow: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/langflow/
description: "Every Langflow vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (5), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-07-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Langflow: known exploited vulnerabilities

- 2026-07-21 [CVE-2026-0770](https://erroneo.us/security/cve/CVE-2026-0770/index.md) Langflow Langflow: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability (due 2026-07-24; ransomware: Unknown)
- 2026-07-07 [CVE-2026-55255](https://erroneo.us/security/cve/CVE-2026-55255/index.md) Langflow Langflow: Langflow Authorization Bypass Through User-Controlled Key Vulnerability (due 2026-07-10; ransomware: Unknown)
- 2026-05-21 [CVE-2025-34291](https://erroneo.us/security/cve/CVE-2025-34291/index.md) Langflow Langflow: Langflow Origin Validation Error Vulnerability (due 2026-06-04; ransomware: Unknown)
- 2026-03-25 [CVE-2026-33017](https://erroneo.us/security/cve/CVE-2026-33017/index.md) Langflow Langflow: Langflow Code Injection Vulnerability (due 2026-04-08; ransomware: Unknown)
- 2025-05-05 [CVE-2025-3248](https://erroneo.us/security/cve/CVE-2025-3248/index.md) Langflow Langflow: Langflow Missing Authentication Vulnerability (due 2025-05-26; ransomware: Known)

---
Source page: https://erroneo.us/security/vendor/langflow/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt