CVE-2025-34291 1

CVE-2025-34291: Langflow Origin Validation Error Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog May 21, 2026

Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include...

Vulnerabilities & Patching