Langflow
CVEs currently on EVULNABLE's Priority Feed for Langflow, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 1 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 0 | 0 |
| 2026-04-27 | 0 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 0 | 0 |
| 2026-05-18 | 1 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 0 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 0 | 0 |
| 2026-07-06 | 1 | 0 |
| 2026-07-13 | 0 | 0 |
| 2026-07-20 | 1 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 0 | 0 |
| 2026-08-10 | 0 | 0 |
| 2026-08-17 | 0 | 0 |
| 2026-08-24 | 0 | 0 |
| 2026-08-31 | 0 | 0 |
| 2026-09-07 | 0 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 0 | 0 |
| 2026-09-28 | 0 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 0 | 0 |
In EVULNABLE's ranked feed
Showing all 5 Langflow CVEs in EVULNABLE's ranked feed.
#1 95 Immediate CVE-2025-3248 ExigentKEV since 2025 · listed over a yearRansomwareCISA KEV Langflow — Langflow Missing Authentication Vulnerability KEV + ransomware, EPSS 99.9%
EVRS 95/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#2 87 Immediate CVE-2025-34291 ExigentCISA federal deadline · Overdue by 4 monthsCISA KEV Langflow — Langflow Origin Validation Error Vulnerability KEV, EPSS 92.8%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.928.
#3 82 Urgent CVE-2026-0770 CISA federal deadline · Overdue by 3 monthsCISA KEV Langflow — Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability KEV, EPSS 63.0%, added to KEV within the last 90 days
EVRS 82/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.630.
#4 75 Urgent CVE-2026-33017 CISA federal deadline · Overdue by 6 monthsCISA KEV Langflow — Langflow Code Injection Vulnerability KEV, EPSS 24.8%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.248.
#5 75 Urgent CVE-2026-55255 CISA federal deadline · Overdue by 3 monthsCISA KEV Langflow — Langflow Authorization Bypass Through User-Controlled Key Vulnerability KEV, EPSS 0.9%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.009.