# langflow-ai vulnerabilities & exploitation > As of 2026-10-05, Threadlinqs tracks 6 langflow-ai CVEs, 0 in the CISA Known Exploited Vulnerabilities catalog, linked to 9 tracked threat campaigns and 1 named threat actor. **Data as of:** 2026-10-05 ## Exploitation timeline Threadlinqs has recorded 6 langflow-ai CVEs published between 2026-03-15 and 2026-06-15. The busiest month was 2026-06 (5 new CVEs). None of them is listed in CISA KEV yet. ## Most exploited vulnerabilities Ranked with CISA KEV listings first, then EPSS exploit probability, then CVSS score. Showing 6 of 6 tracked langflow-ai CVEs. - [CVE-2026-5027](https://intel.threadlinqs.com/cve/CVE-2026-5027) — HIGH 8.8 · EPSS 4.8% · 2026-03-27 - [CVE-2026-55447](https://intel.threadlinqs.com/cve/CVE-2026-55447) — CRITICAL 9.6 · EPSS 0.3% · 2026-06-23 - [CVE-2026-55446](https://intel.threadlinqs.com/cve/CVE-2026-55446) — HIGH 7.5 · EPSS 0.3% · 2026-06-23 - [CVE-2026-55450](https://intel.threadlinqs.com/cve/CVE-2026-55450) — CRITICAL 9.3 · EPSS 0.3% · 2026-06-23 - [CVE-2026-55255](https://intel.threadlinqs.com/cve/CVE-2026-55255) — CRITICAL 9.9 · EPSS 0.2% · 2026-06-23 - [CVE-2026-55423](https://intel.threadlinqs.com/cve/CVE-2026-55423) — MEDIUM 6.1 · EPSS 0.2% · 2026-06-23 ## Products affected Threadlinqs normalises CPE and CNA product records across all 6 CVEs; 1 distinct langflow-ai product is affected. The most frequently affected: - langflow — 6 CVEs ## Threat activity 9 tracked threat campaigns reference langflow-ai products or exploit langflow-ai CVEs: - [GTIG: AI-Era Vulnerability Discovery and Exploitation Surge — In-the-Wild Exploitation of BeyondTrust CVE-2026-1731, LiteLLM CVE-2026-42271 and Langflow CVE-2026-5027](https://intel.threadlinqs.com/threat/TL-2026-2818) — CRITICAL — 2026-09-30 - [CVE-2026-0768: Critical Langflow RCE Vulnerability Under Active Exploitation](https://intel.threadlinqs.com/threat/TL-2026-2270) — CRITICAL — 2026-09-01 - [Langflow CVE-2025-3248 Unauthenticated RCE Exploited to Build Custom Gafgyt/BASHLITE DDoS Botnet](https://intel.threadlinqs.com/threat/TL-2026-1328) — CRITICAL — 2026-07-14 - [CVE-2025-3248 & CVE-2026-5027: Langflow RCE and Path Traversal Chained for Flodrix Botnet Deployment](https://intel.threadlinqs.com/threat/TL-2026-1247) — CRITICAL — 2026-07-12 - [JADEPUFFER: AI Agent Exploits Langflow RCE (CVE-2025-3248) to Automate Database Ransomware/Extortion Attack](https://intel.threadlinqs.com/threat/TL-2026-1117) — CRITICAL — 2026-07-05 - [JADEPUFFER Agentic Ransomware: Autonomous LLM Agent Exploits Langflow (CVE-2025-3248) and Nacos (CVE-2021-29441) for End-to-End Database Extortion](https://intel.threadlinqs.com/threat/TL-2026-1102) — CRITICAL — 2026-07-04 - [JADEPUFFER: First End-to-End Agentic Ransomware Attack Exploiting Langflow (CVE-2025-3248) and Nacos (CVE-2021-29441)](https://intel.threadlinqs.com/threat/TL-2026-1083) — CRITICAL — 2026-07-02 - [JADEPUFFER Agentic Ransomware Exploits Langflow CVE-2025-3248 and Nacos CVE-2021-29441 via Base64-Encoded Python Payloads](https://intel.threadlinqs.com/threat/TL-2026-1116) — CRITICAL — 2026-07-02 - [CVE-2026-5027: Path Traversal Arbitrary File Write in Langflow AI Dev Platform (upload_user_file) Exploited in the Wild for Unauthenticated RCE](https://intel.threadlinqs.com/threat/TL-2026-0766) — HIGH — 2026-06-10 ## Threat actors targeting langflow-ai Named threat actors attributed to campaigns that involve langflow-ai products or CVEs, with the number of linked campaigns: - [JADEPUFFER](https://intel.threadlinqs.com/actor/JADEPUFFER) — 2 campaigns ## How to prioritise langflow-ai patching This order follows the data Threadlinqs holds for langflow-ai, not a generic severity checklist: - No langflow-ai CVE is in CISA KEV yet, so rank by exploit probability instead. - Outside KEV, the highest EPSS scores are [CVE-2026-5027](https://intel.threadlinqs.com/cve/CVE-2026-5027) (4.8%), [CVE-2026-55447](https://intel.threadlinqs.com/cve/CVE-2026-55447) (0.3%), [CVE-2026-55446](https://intel.threadlinqs.com/cve/CVE-2026-55446) (0.3%). - 3 CVEs score Critical and 2 High on CVSS v3 (maximum 9.9, average 8.5); sequence these after KEV and high-EPSS items. - 1 CVE has a public exploit or proof of concept recorded, which shortens the time from disclosure to attack. ## About this data Vendor attribution comes from the CNA and CPE product records of each CVE, folded to one vendor name; CVSS, EPSS and KEV status are read from the Threadlinqs CVE catalog; campaign and actor links come from tracked threat records. Counts reflect the data as of 2026-10-05 and refresh daily. Canonical: https://intel.threadlinqs.com/vendors/langflow-ai All vendors: https://intel.threadlinqs.com/vendors Full detection coverage and IOCs via the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp