The current version of Langflow is v1.12.5 (as of 06/10/2026). patchletter checks the official source daily and emails you new releases.
Actively exploited vulnerabilities
The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. What CISA does not carry does not appear in this list — even where it is being exploited.
9.8 critical · over the network, without login · CISA deadline was 26 May 25
- CVE-2026-9198IBM Langflow Code Injection Vulnerability
9.8 critical · over the network, without login · CISA deadline was 7 Aug
- CVE-2026-33017Langflow Code Injection Vulnerability
9.8 critical · over the network, without login · CISA deadline was 8 Apr
- CVE-2026-0770Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
9.8 critical · over the network, without login · CISA deadline was 24 Jul
- CVE-2025-34291Langflow Origin Validation Error Vulnerability
8.8 high · over the network, with a basic account · CISA deadline was 4 Jun
- CVE-2026-55255Langflow Authorization Bypass Through User-Controlled Key Vulnerability
8.4 high · over the network, with a basic account · CISA deadline was 10 Jul
Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.
BSI security advisories
Advisories the German BSI (CERT-Bund) published for this product. Whether your version is affected is stated in the advisory itself.
- Langflow: Mehrere Schwachstellen
WID-SEC-W-2026-3728 · 7 Oct
- Langflow: Schwachstelle ermöglicht Codeausführung
WID-SEC-W-2026-3311 · 6 Oct
- Langflow: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Manipulation von Daten
WID-SEC-W-2026-2837 · 6 Oct
- Langflow: Mehrere Schwachstellen
WID-SEC-W-2026-3616 · 6 Oct
- Langflow OSS: Mehrere Schwachstellen
WID-SEC-W-2026-3239 · 15 Sept
- Langflow: Mehrere Schwachstellen
WID-SEC-W-2026-3350 · 15 Sept
- Langflow OSS: Mehrere Schwachstellen
WID-SEC-W-2026-3096 · 15 Sept
- Langflow: Mehrere Schwachstellen
WID-SEC-W-2026-3191 · 7 Sept
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| v1.12.5 | STABLE | 06/10/2026 | Release notes → |
| 1.12.4 | STABLE | 29/09/2026 | Release notes → |
| v1.12.3 | STABLE | 22/09/2026 | Release notes → |
| v1.12.2 | STABLE | 16/09/2026 | Release notes → |
| v1.12.1 | STABLE | 09/09/2026 | Release notes → |
| 1.12.0 | STABLE | 01/09/2026 | Release notes → |
| 1.11.6 | STABLE | 01/09/2026 | Release notes → |
| 1.11.5 | STABLE | 25/08/2026 | Release notes → |
| 1.11.4 | STABLE | 19/08/2026 | Release notes → |
Frequently asked questions
- What is the latest version of Langflow?
- Langflow v1.12.5, released 06/10/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the Langflow release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new Langflow updates?
- Tick Langflow off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.
An email as soon as a new Langflow version ships
We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.
Embed this badge
The badge shows the current Langflow version and keeps it up to date. Anyone may embed it, no account needed.
[](https://patchletter.com/en/software/langflow)https://patchletter.com/badge/langflow.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
