All vulnerabilities
CVE-2026-33017CVE-2025-3248GHSA-rvqx-wpfh-mfx7GHSA-vwmf-pq79-vjvxPYSEC-2025-36PYSEC-2026-380

Langflow Code Injection Vulnerability

Langflow LangflowPyPIApplications & CMS
Open in ThreatlineRecord JSON
CVSS
9.3Critical
ExploitationExploited in the wildAdded to KEV 25 Mar 2026CISA KEV
Exploit odds (EPSS)24.8%Chance of exploitation activity in the next 30 days, higher than 97% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.3.0Also 0.3.0OSV
Federal deadline8 Apr 2026Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

  • 1.3.0langflow, PyPIOSVpip install "langflow>=1.3.0"
  • 0.3.0langflow-base, PyPIOSVpip install "langflow-base>=0.3.0"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 20 Mar 2026, 04:52 UTCPublishedCVE List
  2. 20 Mar 2026Exploit code publicMetasploit
  3. 25 Mar 2026Added to CISA KEVCISA KEV

Public exploit code and templates 3

  • Exploit moduleLangflow Unauth RCE 20 Mar 2026Metasploit
  • Webapps exploitLangflow 1.9.0 - RCE 8 Jul 2026Exploit-DB
  • Scanner templateLangflow < 1.9.0 - Remote Code ExecutionNuclei

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Description

Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication.

Text from CVE List

Affected versions 104

  • langflowaffected: < 1.9.0CVE List
  • langflow, pip<= 1.8.2GitHub
  • langflow, PyPIfrom first release, fixed in 1.3.0OSV
  • langflow, PyPI0.0.31OSV
  • langflow, PyPI0.0.32OSV
  • langflow, PyPI0.0.33OSV
  • langflow, PyPI0.0.40OSV
  • langflow, PyPI0.0.44OSV
  • langflow, PyPI0.0.45OSV
  • langflow, PyPI0.0.46OSV
  • langflow, PyPI0.0.52OSV
  • langflow, PyPI0.0.53OSV
  • langflow, PyPI0.0.54OSV
  • langflow, PyPI0.0.55OSV
  • langflow, PyPI0.0.56OSV
  • langflow, PyPI0.0.57OSV
  • langflow, PyPI0.0.58OSV
  • langflow, PyPI0.0.61OSV
  • langflow, PyPI0.0.62OSV
  • langflow, PyPI0.0.63OSV
  • langflow, PyPI0.0.64OSV
  • langflow, PyPI0.0.65OSV
  • langflow, PyPI0.0.66OSV
  • langflow, PyPI0.0.67OSV
  • langflow, PyPI0.0.68OSV
  • langflow, PyPI0.0.69OSV
  • langflow, PyPI0.0.70OSV
  • langflow, PyPI0.0.71OSV
  • langflow, PyPI0.0.72OSV
  • langflow, PyPI0.0.73OSV
  • langflow, PyPI0.0.74OSV
  • langflow, PyPI0.0.75OSV
  • langflow, PyPI0.0.76OSV
  • langflow, PyPI0.0.78OSV
  • langflow, PyPI0.0.79OSV
  • langflow, PyPI0.0.80OSV
  • langflow, PyPI0.0.81OSV
  • langflow, PyPI0.0.83OSV
  • langflow, PyPI0.0.84OSV
  • langflow, PyPI0.0.85OSV
  • langflow, PyPI0.0.86OSV
  • langflow, PyPI0.0.87OSV
  • langflow, PyPI0.0.88OSV
  • langflow, PyPI0.0.89OSV
  • langflow, PyPI0.1.0OSV
  • langflow, PyPI0.1.2OSV
  • langflow, PyPI0.1.3OSV
  • langflow, PyPI0.1.4OSV
  • langflow, PyPI0.1.5OSV
  • langflow, PyPI0.1.6OSV
  • langflow, PyPI0.1.7OSV
  • langflow, PyPI0.2.0OSV
  • langflow, PyPI0.2.1OSV
  • langflow-base, PyPIfrom first release, fixed in 0.3.0OSV
  • langflow-base, PyPI0.0.13OSV
  • langflow-base, PyPI0.0.14OSV
  • langflow-base, PyPI0.0.15OSV
  • langflow-base, PyPI0.0.16OSV
  • langflow-base, PyPI0.0.17OSV
  • langflow-base, PyPI0.0.18OSV
  • langflow-base, PyPI0.0.19OSV
  • langflow-base, PyPI0.0.20OSV
  • langflow-base, PyPI0.0.21OSV
  • langflow-base, PyPI0.0.22OSV
  • langflow-base, PyPI0.0.23OSV
  • langflow-base, PyPI0.0.24OSV
  • langflow-base, PyPI0.0.25OSV
  • langflow-base, PyPI0.0.26OSV
  • langflow-base, PyPI0.0.27OSV
  • langflow-base, PyPI0.0.28OSV
  • langflow-base, PyPI0.0.29OSV
  • langflow-base, PyPI0.0.30OSV
  • langflow-base, PyPI0.0.31OSV
  • langflow-base, PyPI0.0.32OSV
  • langflow-base, PyPI0.0.33OSV
  • langflow-base, PyPI0.0.34OSV
  • langflow-base, PyPI0.0.35OSV
  • langflow-base, PyPI0.0.36OSV
  • langflow-base, PyPI0.0.37OSV
  • langflow-base, PyPI0.0.38OSV
  • langflow-base, PyPI0.0.39OSV
  • langflow-base, PyPI0.0.40OSV
  • langflow-base, PyPI0.0.41OSV
  • langflow-base, PyPI0.0.42OSV
  • langflow-base, PyPI0.0.43OSV
  • langflow-base, PyPI0.0.44OSV
  • langflow-base, PyPI0.0.45OSV
  • langflow-base, PyPI0.0.46OSV
  • langflow-base, PyPI0.0.47OSV
  • langflow-base, PyPI0.0.48OSV
  • langflow-base, PyPI0.0.49OSV
  • langflow-base, PyPI0.0.50OSV
  • langflow-base, PyPI0.0.51OSV
  • langflow-base, PyPI0.0.52OSV
  • langflow-base, PyPI0.0.53OSV
  • langflow-base, PyPI0.0.54OSV
  • langflow-base, PyPI0.0.55OSV
  • langflow-base, PyPI0.0.56OSV
  • langflow-base, PyPI0.0.57OSV
  • langflow-base, PyPI0.0.58OSV
  • langflow-base, PyPI0.0.59OSV
  • langflow-base, PyPI0.0.60OSV
  • langflow-base, PyPI0.0.61OSV
  • langflow-base, PyPI0.0.62OSV

References 8