Langflow

Langflow is a low-volume but prominently tracked open-source platform for building and deploying large-language-model applications, where its concentrated vulnerability footprint reflects the framework's exposure to code composition, file handling, and access-control operations. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes and frequently acquire public exploit tooling, with a moderate tendency toward confirmed in-the-wild exploitation and CISA cataloging. The exposure recurs across authentication and authorization boundaries—including code injection, path traversal, authorization bypass through user-controlled keys, and missing authentication on critical functions—reflecting the inherent risks of a system that orchestrates dynamic LLM workflows and file I/O at scale. Defenders deploying Langflow should prioritize patching and restrict instance exposure; live severity, exploitation, and exposure counts are shown alongside this summary.