agentprime: langflowEvery new CVE for langflow.https://agentprime.io/CVE-2026-105740: Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the serverhttps://agentprime.io/advisories/CVE-2026-105740/https://agentprime.io/advisories/CVE-2026-105740/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 20:46:18 GMTCVEcriticalCVE-2026-101861: Langflow Code Execution via eval() in Component Input Schemahttps://agentprime.io/advisories/CVE-2026-101861/https://agentprime.io/advisories/CVE-2026-101861/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 15:49:14 GMTCVECVE-2026-12822: langflow-ai langflow Bundle URL Loader code injectionhttps://agentprime.io/advisories/CVE-2026-12822/https://agentprime.io/advisories/CVE-2026-12822/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 21 Jun 2026 23:30:09 GMTCVECVE-2026-7687: langflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details command injectionhttps://agentprime.io/advisories/CVE-2026-7687/https://agentprime.io/advisories/CVE-2026-7687/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 03 May 2026 08:45:14 GMTCVECVE-2026-6600: langflow-ai langflow Frontend React Component Rendering edit-message.tsx cross site scriptinghttps://agentprime.io/advisories/CVE-2026-6600/https://agentprime.io/advisories/CVE-2026-6600/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Apr 2026 03:15:12 GMTCVECVE-2026-5027: Langflow - Path Traversal Arbitrary File Write via upload_user_filehttps://agentprime.io/advisories/CVE-2026-5027/https://agentprime.io/advisories/CVE-2026-5027/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.40 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 14:54:53 GMTCVEcriticalCVE-2026-5026: Langflow - Stored XSS via Malicious SVG Uploadhttps://agentprime.io/advisories/CVE-2026-5026/https://agentprime.io/advisories/CVE-2026-5026/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 14:50:36 GMTCVECVE-2026-5025: Langflow - Application Logs Exposed to All Authenticated Usershttps://agentprime.io/advisories/CVE-2026-5025/https://agentprime.io/advisories/CVE-2026-5025/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 14:43:00 GMTCVECVE-2026-5022: Langflow - Missing Authorization on download_image Endpointhttps://agentprime.io/advisories/CVE-2026-5022/https://agentprime.io/advisories/CVE-2026-5022/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 14:34:14 GMTCVECVE-2026-33475: Langflow GitHub Actions Shell Injectionhttps://agentprime.io/advisories/CVE-2026-33475/https://agentprime.io/advisories/CVE-2026-33475/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Mar 2026 12:54:33 GMTCVEcriticalCVE-2026-0772: Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-0772/https://agentprime.io/advisories/CVE-2026-0772/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Jan 2026 03:29:01 GMTCVECVE-2026-0771: Langflow PythonFunction Code Injection Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-0771/https://agentprime.io/advisories/CVE-2026-0771/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Jan 2026 03:28:56 GMTCVECVE-2026-0769: Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-0769/https://agentprime.io/advisories/CVE-2026-0769/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.41 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Jan 2026 03:28:47 GMTCVEcriticalCVE-2026-0768: Langflow code Code Injection Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-0768/https://agentprime.io/advisories/CVE-2026-0768/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.28 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Jan 2026 03:28:43 GMTCVEcritical