lfx vulnerabilities

1 known vulnerability in lfx from Langflow-ai. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  langflow: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-105697Oct 5, 2026Langflow-aiEPSS 1.49%

  Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and (before 1.10.3) wrapped in bash -c