Langflow-Ai Langflow-Base vulnerabilities

CVE-2026-105697 [CRITICAL] CWE-78 CVE-2026-105697: Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10. Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and (before 1.10.3) wrapped in bash -c "exec {command} ...". Any user able to reach the MCP server settings ("Settings → MCP Se

CVE-2026-34046 [HIGH] CWE-639 CVE-2026-34046: Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.5. Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.5.1, the `_read_flow` helper in `src/backend/base/langflow/api/v1/flows.py` branched on the `AUTO_LOGIN` setting to decide whether to filter by `user_id`. When `AUTO_LOGIN` was `False` (i.e., authentication was enabled), neither branch enforced an ownersh

CVE-2026-105698 [MEDIUM] CWE-639 CVE-2026-105698: Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10 Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/build/{flow_id}/vertices and POST /api/v1/build/{flow_id}/vertices/{vertex_id} handlers. Through version 1.7.1, an unauthenticated caller who knew another user's flow UUID cou