Firetruck

CVE-2026-33017

KEV
Updated May 21, 2026 · PUBLISHED
View KEV entry →

Description

Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
langflowlangflow-ai / langflow< 1.9.0affected