Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2458 articles · 111856 vulns · 38/41 feeds (7d)
← Back to list
EST
PRE-CVE

Multiple Vulnerabilities in Langflow Allow File Manipulation, Information Disclosure, and Cross-Site Scripting

72% confidence

Description

An attacker can exploit multiple vulnerabilities in Langflow to manipulate files, disclose confidential information, or perform cross-site scripting (XSS) attacks.

Affected Products

VendorProductVersions
—langflow—

Related News (1 articles)

Tier B
BSI Advisories2h ago
[NEU] [mittel] Langflow: Mehrere Schwachstellen
→ No new info (linked only)
CISA KEV❌ No
Actively exploited❌ No
CWECWE-79, CWE-200, CWE-434
PublishedApr 20, 2026
Last enriched2h ago
Tags
information disclosurecross-site scriptingfile manipulationmultiple vulnerabilities
Trending Score23
Source articles1
Independent1
Info Completeness5/14
Missing: cve_id, vendor, versions, cvss, epss, kev, exploit, patch, iocs

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Pin to Dashboard

Verification

State: reported
Confidence: 72%

Vulnerability Timeline

CVE Published
Apr 20, 2026
Discovered by ZDM
Apr 20, 2026