Timeline
CVE-2025-34291
Origin-validation flaw (CVSS 9.4) in Langflow combining permissive CORS, missing CSRF protection and a code-execution endpoint.
2 of 2 entries (2 events, 0 interactions)
Filters
#11 21 Jul
Mentioned in: Langflow hits KEV a second time
Cybersecurity: Threats and Defences#5 21 May