Langflow Unauthenticated RCE in Public Flow Build Endpoint
CVSS 10.0 unauthenticated RCE in Langflow 1.0.0 through 1.9.3 via the public flow build endpoint. No credentials required. Metasploit module available.
- Vendor
- Langflow
- Product
- Langflow (1.0.0 through 1.9.3)
- CVSS
- 10.0
- EPSS (exploit probability)
- 1.6%
- Status
- patched
- Published
Is CVE-2026-10134 being exploited?
Not on any exploited-vulnerability catalog we track. CVE-2026-10134 was not on the CISA, ENISA or CIRCL exploited catalogs as of our 2026-10-24 snapshot. That can change quickly; check the write-up below for the latest reporting.
FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 1.6% (scored October 24, 2026).
- CISA KEV[ — ]
- ENISA EUVD (exploited)[ — ]
- CIRCL KEV[ — ]
Catalog snapshot 2026-10-24. Full cross-catalog view: /kev-comparison
CVE-2026-10134 timeline
Every event links to its source. Catalog dates are each catalog's own; day offsets count from NVD publication. Data: JSON
CVE-2026-10134 is an unauthenticated remote code execution vulnerability in Langflow, the open-source LLM workflow builder. The flaw affects the public flow build endpoint and allows an unauthenticated attacker to execute arbitrary code on affected instances. Versions 1.0.0 through 1.9.3 are affected.
The vulnerability carries a CVSS base score of 10.0, the maximum possible. Rapid7 released a Metasploit exploit module for this CVE in October 2026. Users should update Langflow to a patched release immediately.
Other Langflow CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-93674 Langflow Authenticated Blind Command Injectionwrite-up | [ CRITICAL ] | 9.8 | 6.2% | — |
| CVE-2026-7873 Langflow Authenticated RCE via Code Validation Endpointwrite-up | [ CRITICAL ] | 9.9 | 1.1% | — |
| CVE-2026-0769 Langflow Unauthenticated RCE via Custom Component Evaluationwrite-up | [ CRITICAL ] | 9.8 | 41.2% | — |
| CVE-2026-105740 Authenticated RCE via MCP tool additionwrite-up | [ CRITICAL ] | 9.9 | 0.6% | — |
| CVE-2026-0768 Langflow Unauthenticated RCE via Code Execution Endpointwrite-up | [ CRITICAL ] | 9.8 | 23.1% | — |
| CVE-2026-0770 Langflow validate-endpoint exec_globals RCE (unauthenticated)write-up | [ CRITICAL ] | 9.8 | 62.6% | |
| CVE-2026-55255 Langflow /api/v1/responses IDOR — cross-user flow executionwrite-up | [ HIGH ] | 8.4 | 0.9% | |
| CVE-2025-34291 Langflow CORS misconfiguration enables CSRF-driven token theft and RCEwrite-up | [ HIGH ] | 8.8 | 92.8% |
