Known Exploited Vulnerabilities March 25, 2026 · CISA KEV Catalog

CVE-2026-33017: Langflow Code Injection Vulnerability

Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2026-33017Langflow

Related

CVE-2026-0770: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability Known Exploited Vulnerabilities · Jul 21, 2026

CVE-2026-55255: Langflow Authorization Bypass Through User-Controlled Key Vulnerability Known Exploited Vulnerabilities · Jul 07, 2026

CVE-2025-34291: Langflow Origin Validation Error Vulnerability Known Exploited Vulnerabilities · May 21, 2026