Langflow Vulnerabilities Advisory

CERT-Bund has released a critical security advisory (WID-SEC-2026-0823) concerning multiple vulnerabilities in Langflow, a visual interface for creating LLM-based applications. The vulnerabilities have a CVSS Base Score of 9.1 and a Temporal Score of 8.2, indicating a high risk. Exploitation could allow an attacker to execute arbitrary code, leading to information disclosure and potential data manipulation. The advisory specifically impacts Open Source Langflow versions prior to 1.7.0 and 1.9.0, running on Linux, UNIX, and Windows operating systems.

Affected organizations using Langflow must immediately review their versions and apply available mitigations. The advisory indicates that mitigation is possible, and users should consult the provided links for specific version history and detailed information on addressing these security flaws. Failure to mitigate these critical vulnerabilities could lead to significant security breaches, including unauthorized access and control over systems processing sensitive data.