PyPI/langflow CVE-2026-6599: medium 6.3, EPSS 0.23%
Langflow vulnerable to injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.8.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-v66p-f7x3-4794
- https://nvd.nist.gov/vuln/detail/CVE-2026-6599
- https://gist.github.com/chenhouser2025/a909c47316b7a0948ee68c109ab747a3
- https://github.com/langflow-ai/langflow
- https://vuldb.com/submit/791922
- https://vuldb.com/vuln/358234
- https://vuldb.com/vuln/358234/cti
CVE-2026-6599 · published · modified · JSON