Between July 7 and July 13, 2026, OSV.dev published 10 distinct security advisories for Langflow, a popular open-source...

Between July 7 and July 13, 2026, OSV.dev published 10 distinct security advisories for Langflow, a popular open-source visual framework for building AI agents. The advisories cover critical and high-severity issues including remote code execution (PYSEC-2026-1523, PYSEC-2026-1525), server-side request forgery (PYSEC-2026-1522), missing authentication on critical API endpoints (PYSEC-2026-1524), path traversal (PYSEC-2026-2566), missing ownership checks allowing read/modify/delete of any flow (PYSEC-2026-2567), cleartext storage of authentication settings (PYSEC-2026-2568), injection (PYSEC-2026-2569), information leak via incomplete API key redaction (PYSEC-2026-2565), and inefficient regex complexity (PYSEC-2026-1521).

These are not theoretical: several are remotely exploitable and affect any Langflow instance exposed beyond a trusted network. For an AI-infrastructure ecosystem increasingly dependent on open-source agent frameworks, this cluster undermines the 'secure by default' assumption that enterprise adopters rely on. It creates immediate friction for organizations evaluating or running Langflow in production, likely slowing deployment timelines and pushing security-conscious teams to competing frameworks with fewer disclosed CVEs.

The timing is notable: all advisories were filed within a single week, suggesting either a coordinated security audit disclosure or a backlog release. The high density of critical issues (RCE, auth bypass) is especially damaging to developer trust. While the PyPI release of langflow 1.12.0.dev12 on August 1, 2026 indicates active maintenance, the existence of unpatched or newly disclosed vulnerabilities in the same month creates a negative signal for Langflow's enterprise readiness.

What the sources said:

• PYSEC-2026-1523: "Langflow vulnerable to remote code execution" (CVE-2024-48061).
• PYSEC-2026-1524: "Langflow Missing Authentication on Critical API Endpoints" (CVE-2026-21445).
• PYSEC-2026-2567: "Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check" (CVE-2026-34046).
• PYSEC-2026-2565: "Langflow has an Information Leak through Incomplete API Key Redaction" (CVE-2026-6597).

All advisories are indexed in the OSV database with associated GitHub Security Advisories (GHSA) and CVE identifiers, providing a verifiable record for downstream security scanners and SBOM tooling.