{"api_version":"v1","generated_at":"2026-10-07T02:40:00+00:00","product":{"cve_count":9,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-langflow-langflow-991dace082a1","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/langflow","name":"Langflow","next_cursor":null,"observations":[{"affected":"langflow: < 1.9.1","affected_versions_present":true,"cve_id":"CVE-2026-55255","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55255","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-08T03:56:30.245Z","patch_url":"https://github.com/langflow-ai/langflow/pull/12832","primary_source":"","published":"2026-06-23T16:28:20.985Z"},{"affected":"langflow: < 1.9.0","affected_versions_present":true,"cve_id":"CVE-2026-33017","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33017","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-05-21T19:54:41.184Z","patch_url":"https://github.com/langflow-ai/langflow/commit/73b6612e3ef25fdae0a752d75b0fabd47328d4f0","primary_source":"","published":"2026-03-20T04:52:52.885Z"},{"affected":"1.5.0.post2","affected_versions_present":true,"cve_id":"CVE-2026-0772","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-0772","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T14:44:25.873Z","patch_url":"","primary_source":"","published":"2026-01-23T03:29:01.133Z"},{"affected":"1.4.2","affected_versions_present":true,"cve_id":"CVE-2026-0771","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-0771","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T14:44:26.158Z","patch_url":"","primary_source":"","published":"2026-01-23T03:28:56.528Z"},{"affected":"Langflow: 1.4.2","affected_versions_present":true,"cve_id":"CVE-2026-0770","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-0770","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-22T03:55:44.396Z","patch_url":"","primary_source":"","published":"2026-01-23T03:28:52.286Z"},{"affected":"1.3.2","affected_versions_present":true,"cve_id":"CVE-2026-0769","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-0769","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T14:44:26.824Z","patch_url":"","primary_source":"","published":"2026-01-23T03:28:47.572Z"},{"affected":"1.4.2","affected_versions_present":true,"cve_id":"CVE-2026-0768","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-0768","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T14:44:27.192Z","patch_url":"","primary_source":"","published":"2026-01-23T03:28:43.301Z"},{"affected":"Langflow: \u2264 1.6.9","affected_versions_present":true,"cve_id":"CVE-2025-34291","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-34291","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-14T22:25:54.449Z","patch_url":"https://www.obsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platform","primary_source":"","published":"2025-12-05T22:27:26.438Z"},{"affected":"langflow: < 1.3.0","affected_versions_present":true,"cve_id":"CVE-2025-3248","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-3248","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-14T22:25:39.291Z","patch_url":"https://github.com/langflow-ai/langflow/pull/6911","primary_source":"","published":"2025-04-07T14:22:38.980Z"}],"source_generated_at":"2026-10-06T06:22:27.870Z","vendor":"Langflow"}}