CVE-2026-103560

Update: Since the original post, 20 additional Langflow CVEs have been published, including several high- and critical-severity vulnerabilities affecting versions up to 1.12.2. The newly disclosed issues cover a range of impact areas, including remote code execution, command injection, authentication/authorization weaknesses, path/file handling issues, and other application-layer security flaws. Organizations running Langflow should review the latest advisories, verify their deployed version, and prioritize upgrading where applicable.

New CVEs: CVE-2026-97680, CVE-2026-93449, CVE-2026-97674, CVE-2026-103560, CVE-2026-93445, CVE-2026-93443, CVE-2026-93447, CVE-2026-93677, CVE-2026-93678, CVE-2026-101331, CVE-2026-97673, CVE-2026-97655, CVE-2026-93675, CVE-2026-88962, CVE-2026-97678, CVE-2026-97679, CVE-2026-97676, CVE-2026-104335, CVE-2026-93674, CVE-2026-104334.