Langflow — PoC Archivehttps://poc.intelseclab.com/tags/langflow/Latest proof-of-concept entries.Hugoen-usFri, 31 Jul 2026 00:00:00 +0000IBM Langflow OSS Unauthenticated RCE via Auto-Login + validate/code Chain (CVE-2026-9198)https://poc.intelseclab.com/pocs/web/2026-07-31_cve-2026-9198-langflow-auto-login-validate-code-rce/Fri, 31 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-31_cve-2026-9198-langflow-auto-login-validate-code-rce/Critical severity (CVSS 9.8) — web · CVE-2026-9198. Status: Weaponized. Affects: IBM Langflow OSS (visual AI/agent-flow builder). Tags: langflow, ibm, auto-login, code-injection, cwe-94, unauthenticated, rce, python-exec, ai-agent-framework.webCriticallangflowibmauto-logincode-injectioncwe-94unauthenticatedrcepython-execai-agent-frameworkLangflow Responses API IDOR — Execute Another User's Flow (CVE-2026-55255)https://poc.intelseclab.com/pocs/web/2026-07-19_cve-2026-55255-langflow-responses-api-idor/Sun, 19 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-19_cve-2026-55255-langflow-responses-api-idor/High severity (CVSS 8.4) — web · CVE-2026-55255 (GHSA-qrpv-q767-xqq2). Status: Weaponized — confirmed cross-user flow execution via a minimal request-only PoC. Affects: Langflow — open-source platform for building and deploying AI-powered agents and workflows (langflow-ai/langflow), OpenAI-compatible Responses API. Tags: langflow, ai-agent-framework, idor, cwe-639, authenticated, remote, cross-tenant, kev.webHighlangflowai-agent-frameworkidorcwe-639authenticatedremotecross-tenantkevLangflow Pre-Auth RCE Mass Scanner (CVE-2026-27966)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-27966-langflow-mass-scanner/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-27966-langflow-mass-scanner/Critical severity (CVSS 9.8) — web · CVE-2026-27966 (GHSA-3645-fxcv-hqr4). Status: Patched. Affects: Langflow (langflow-ai). Tags: langflow, rce, pre-auth, route-injection, vertex-injection, csv-agent, prompt-injection, python, mass-scanner, ai-security.webCriticallangflowrcepre-authroute-injectionvertex-injectioncsv-agentprompt-injectionpythonmass-scannerai-securityLangflow Unauthenticated Remote Code Execution via `validate/code` Endpoint (CVE-2026-0770)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0770-langflow-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0770-langflow-rce/Critical severity — web · CVE-2026-0770. Status: PoC. Affects: Langflow (AI workflow builder). Tags: langflow, rce, unauthenticated, python, code-validation, exec, ai-platform, api.webCriticallangflowrceunauthenticatedpythoncode-validationexecai-platformapiLangflow Remote Code Execution — CVE-2026-27966https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27966-langflow-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27966-langflow-rce/Critical severity (CVSS 9.8) — web · CVE-2026-27966. Status: Weaponized. Affects: Langflow (visual LLM/AI workflow builder), typically exposed on port 7860. Tags: langflow, rce, ai-pipeline, unauthenticated, flow-injection, scanner, interactive-shell.webCriticallangflowrceai-pipelineunauthenticatedflow-injectionscannerinteractive-shellLangflow Knowledge Base Path Traversal / Arbitrary Directory Deletion (CVE-2026-42048)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42048-langflow-kb-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-42048-langflow-kb-path-traversal/High severity — web · CVE-2026-42048 (GHSA-9whx-c884-c68q). Status: PoC. Affects: Langflow (Knowledge Bases bulk delete API). Tags: langflow, path-traversal, arbitrary-file-deletion, cwe-22, api, docker-lab, knowledge-base.webHighlangflowpath-traversalarbitrary-file-deletioncwe-22apidocker-labknowledge-baseLangflow Custom Component Remote Code Execution — CVE-2026-33017https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33017-langflow-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33017-langflow-rce/Critical severity — web · CVE-2026-33017. Status: PoC. Affects: Langflow (flow-building / LLM pipeline platform). Tags: langflow, rce, custom-component, code-execution, flow-builder, reverse-shell, curl.webCriticallangflowrcecustom-componentcode-executionflow-builderreverse-shellcurlLangflow Missing-Authentication Remote Code Execution (CVE-2025-3248)https://poc.intelseclab.com/pocs/web/2026-07-03_cve-2025-3248-langflow-unauth-rce/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_cve-2025-3248-langflow-unauth-rce/Critical severity (CVSS 9.8) — web · CVE-2025-3248. Status: Weaponized. Affects: Langflow (open-source AI/LLM workflow builder). Tags: RCE, unauthenticated, missing-authentication, Langflow, AI-application, python-exec, CISA-KEV, agentic-ransomware, JADEPUFFER.webCriticalRCEunauthenticatedmissing-authenticationLangflowAI-applicationpython-execCISA-KEVagentic-ransomwareJADEPUFFER