Langflow OSS: 25 Vulnerabilities Disclosed, Including Critical RCE and Auth Bypass
Key findings • 25 vulnerabilities disclosed for Langflow OSS on October 29, 2026. • Critical RCE flaws (up to CVSSv3 9.9) allow arbitrary code execution. • Multiple vulnerabilities enable…
Key findings
- 25 vulnerabilities disclosed for Langflow OSS on October 29, 2026.
- Critical RCE flaws (up to CVSSv3 9.9) allow arbitrary code execution.
- Multiple vulnerabilities enable authentication bypass and privilege escalation.
- Sensitive information disclosure and SSRF risks are present.
- Affected versions range from 1.0.0 through 1.12.8.
On October 29, 2026, a significant batch of 25 vulnerabilities was disclosed for Langflow OSS, a platform for developing and orchestrating large language model applications. The disclosures, all occurring within a narrow window, highlight critical security weaknesses, including multiple instances of remote code execution (RCE), authentication bypasses, and sensitive information disclosure. The sheer volume and severity of these flaws underscore the urgent need for users to update their Langflow OSS installations.
Several vulnerabilities center on improper control of code generation and neutralization of special elements, leading to RCE. CVE-2026-107329, CVE-2026-107328, and CVE-2026-107327, all rated Critical with CVSSv3 scores of 9.9, allow remote authenticated attackers to execute arbitrary code. Similarly, CVE-2026-18894 (Critical, 9.8) and CVE-2026-104339 (Critical, 9.8) also permit RCE due to improper control of code generation or OS command elements.
Authentication bypass and privilege escalation are also prominent themes. CVE-2026-93680, a Critical (9.8) vulnerability, allows remote attackers to bypass security restrictions due to improper authentication. Other related issues include CVE-2026-110196 and CVE-2026-110193, both High (8.8), which enable low-privileged authenticated users to bypass administrator restrictions and execute arbitrary code or OS commands.
Information disclosure is another significant concern across the batch. CVE-2026-77817 (Medium, 6.5) allows authenticated attackers to obtain sensitive information due to improper sanitization of secrets during flow and project exports. Cleartext storage of sensitive information (CVE-2026-110200, Medium, 6.5) and insufficiently protected credentials (CVE-2026-110192, Medium, 6.5) further exacerbate this risk.
Denial of service and file system manipulation vulnerabilities are also present. CVE-2026-90991 (Medium, 6.5) allows resource allocation without limits, potentially leading to DoS. Additionally, CVE-2026-77819 (Medium, 6.5) permits authenticated attackers to overwrite arbitrary files due to improper pathname limitations, and CVE-2026-110190 (Medium, 6.5) enables directory traversal, allowing access to arbitrary files.
Server-side request forgery (SSRF) is another vulnerability class identified. CVE-2026-104331 (Medium, 5.4) and CVE-2026-104315 (Medium, 4.3) allow authenticated attackers to send unauthorized requests from the system, potentially leading to network enumeration or other attacks.
The affected versions span from Langflow OSS 1.0.0 through 1.12.8, depending on the specific CVE. The broad range of affected versions indicates a systemic issue that has persisted across multiple releases. Users are strongly advised to consult the specific CVE details and apply necessary patches or updates as provided by Langflow AI to mitigate these risks.
This coordinated disclosure of 25 vulnerabilities, including multiple critical RCE flaws, presents a severe risk to Langflow OSS users. Prompt patching and security review are essential to prevent potential exploitation by malicious actors. The variety of attack vectors, from code execution to information disclosure and SSRF, necessitates a comprehensive security approach.