WID-SEC-W-2026-1178

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Langflow: Mehrere Schwachstellen

view advisory published 2026-04-19

Ein Angreifer kann mehrere Schwachstellen in Langflow ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2026-6600US——
A flaw has been found in langflow-ai langflow up to 1.8.3. This affects an unknown function of the file src/frontend/src/modals/IOModal/components/chatView/chatMessage/components/e…
CVE-2026-6599US——
A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted element is the function get_client_ip/install_mcp_config of the file src/backend/base/langflow/api/v1…
CVE-2026-6598US—OT elevated—
A security vulnerability has been detected in langflow-ai langflow up to 1.8.3. The affected element is the function create_project/encrypt_auth_settings of the file src/backend/ba…
CVE-2026-6597US——
A weakness has been identified in langflow-ai langflow up to 1.8.3. Impacted is the function remove_api_keys/has_api_terms of the file src/backend/base/langflow/api/utils/core.py o…
CVE-2026-6596US——
A security flaw has been discovered in langflow-ai langflow up to 1.1.0. This issue affects the function create_upload_file of the file src/backend/base/Langflow/api/v1/endpoints.p…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan