DEV Community

#langflow

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Reconstructing an attack timeline for Langflow CVE-2026-105740

Reconstructing an attack timeline for Langflow CVE-2026-105740

Comments
3 min read
Detecting exploitation of CVE-2026-105740 in Langflow logs

Detecting exploitation of CVE-2026-105740 in Langflow logs

Comments
2 min read
From CVE-2026-105697 to CVE-2026-105740: a pattern Langflow did not close

From CVE-2026-105697 to CVE-2026-105740: a pattern Langflow did not close

Comments
2 min read
Auto-login plus CVE-2026-105740: the configuration that removes the only barrier in Langflow

Auto-login plus CVE-2026-105740: the configuration that removes the only barrier in Langflow

Comments
2 min read
Turning the Langflow MCP flaw into a broader intrusion: lateral movement options after CVE-2026-105740

Turning the Langflow MCP flaw into a broader intrusion: lateral movement options after CVE-2026-105740

Comments
2 min read
Incident Response Checklist for Langflow OSS 1.0.0 Through 1.12.2

Incident Response Checklist for Langflow OSS 1.0.0 Through 1.12.2

Comments
2 min read
Dependency Confusion in the Langflow Batch: When the Supply Chain Is the Bug

Dependency Confusion in the Langflow Batch: When the Supply Chain Is the Bug

Comments
2 min read
Langflow pipes commands into bash

Langflow pipes commands into bash

Comments
3 min read
Langflow never asked you for a password? Check LANGFLOW_AUTO_LOGIN in one request

Langflow never asked you for a password? Check LANGFLOW_AUTO_LOGIN in one request

Comments
3 min read
Beyond the Badge: Why Authenticated Langflow Users Still Escape the Sandbox

Beyond the Badge: Why Authenticated Langflow Users Still Escape the Sandbox

Comments
2 min read
CVE-2026-93674 and the Credential Risk in Self-Hosted LLM Platforms

CVE-2026-93674 and the Credential Risk in Self-Hosted LLM Platforms

Comments
2 min read
Why code execution in an LLM orchestrator carries more weight than its CVSS score

Why code execution in an LLM orchestrator carries more weight than its CVSS score

Comments
2 min read
Langflow's MCP Server Setup Let Any User Run OS Commands on the Host: CVE-2026-105697 Patch Guide

Langflow's MCP Server Setup Let Any User Run OS Commands on the Host: CVE-2026-105697 Patch Guide

Comments
6 min read
Langflow OSS against the rest of NCSC-2026-0392: ranking twelve fixes by real urgency

Langflow OSS against the rest of NCSC-2026-0392: ranking twelve fixes by real urgency

Comments
2 min read
Langflow Under Attack Surface Review: CVE-2026-12944, Credential Reach, and What 18,414 Exposed Instances Mean

Langflow Under Attack Surface Review: CVE-2026-12944, Credential Reach, and What 18,414 Exposed Instances Mean

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.