Langflow

This page may contain stale information. Last updated: 2026-07-04

Overview

Langflow is an open-source visual framework for building and deploying AI agents and rag workflows. 145K+ GitHub stars; widely used for self-hosted agent pipelines.

Recent Developments

• 2026-07-01: jadepuffer agentic ransomware — initial access via CVE-2025-3248 on internet-exposed Langflow; chained to nacos/MySQL extortion (2026-07-04-jadepuffer-agentic-ransomware)
• 2026-03: CVE-2026-33017 disclosed — unauthenticated RCE via /api/v1/build_public_tmp/{flow_id}/flow (2026-06-25-langflow-cve-2026-33017-rce-exploited)
• Active exploitation: Sysdig TRT confirmed in-the-wild attacks within ~20 hours; cloud credential theft
• Fix: Langflow 1.9.0 removes attacker-controllable data parameter
• CISA KEV: Added March 25, 2026; federal patch deadline April 8 per BOD 22-01 (2026-06-25-langflow-cisa-kev-listing)
• Pattern: Second major RCE after CVE-2025-3248; ongoing exposure on unpatched self-hosted instances despite KEV listing

Security Notes

Warning

KEV listing does not eliminate risk for self-hosted deployments. Internet-exposed instances pre-1.9.0 should be treated as active incidents — upgrade, rotate API keys, restrict public endpoints.

Related

• rag
• llm-applications
• agentic-ai
• ai-agent-security
• supply-chain-security
• jadepuffer
• agentic-threat-actors
• nacos
• 2026-06-25-langflow-cve-2026-33017-rce-exploited
• langflow-cve-2026-33017-rce-exploited

Sources

• 2026-06-25-langflow-cve-2026-33017-rce-exploited
• 2026-06-25-langflow-csa-research-note
• 2026-06-25-langflow-nvd-detail
• 2026-06-25-langflow-cisa-kev-listing