SieveLLM 보안 모니터

모니터

오늘 볼 것
추세
검색

내 환경

내 스택
자산 감시
설정·연결

정보

소개·판정 규칙
RSS
llms.txt

jk 이동 / 검색

Sieve내 스택에 해당하는 LLM 보안 이슈만검색 /

검색

데이터: OSV.dev(GitHub Advisory 포함) · CISA KEV. 판정은 버전 범위 비교로만 하고, 원문 링크를 항상 함께 둡니다.

모니터

오늘 볼 것
추세
검색

내 환경

내 스택
자산 감시
설정·연결

정보

소개·판정 규칙
RSS
llms.txt

“langflow” 검색 · Sieve

30건 · AI 관련·실제 악용·최신 순

높음실제 악용

IBM Langflow Code Injection Vulnerability

CVE-2026-9198 · KEV-CVE-2026-9198 · 2026. 8. 4.

높음실제 악용

Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

CVE-2026-0770 · KEV-CVE-2026-0770 · 2026. 7. 21.

높음취약점실제 악용

Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

PyPI langflow · 1.9.1에서 수정 · GHSA-qrpv-q767-xqq2 · 2026. 7. 8.

높음취약점실제 악용

Langflow affected by Remote Code Execution via validate_code() exec()

PyPI langflow · 수정 버전 없음 · GHSA-g22f-v6f7-2hrh · 2026. 7. 8.

높음실제 악용

Langflow Authorization Bypass Through User-Controlled Key Vulnerability

CVE-2026-55255 · KEV-CVE-2026-55255 · 2026. 7. 7.

치명취약점실제 악용

Langflow Unauth RCE

PyPI langflow 외 1개 · 1.3.0에서 수정 · GHSA-rvqx-wpfh-mfx7 · 2026. 6. 29.

치명취약점실제 악용

Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint

PyPI langflow · 1.9.0에서 수정 · GHSA-vwmf-pq79-vjvx · 2026. 6. 29.

높음실제 악용

Langflow Origin Validation Error Vulnerability

CVE-2025-34291 · KEV-CVE-2025-34291 · 2026. 5. 21.

높음실제 악용

Langflow Code Injection Vulnerability

CVE-2026-33017 · KEV-CVE-2026-33017 · 2026. 3. 25.

높음실제 악용

Langflow Missing Authentication Vulnerability

CVE-2025-3248 · KEV-CVE-2025-3248 · 2025. 5. 5.

치명취약점

Langflow: Code Injection Vulnerability in Code Validation Endpoint

PyPI langflow · 1.10.1.rc0에서 수정 · GHSA-v798-mcc6-2m3m · 2026. 10. 24.

높음취약점

Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers

PyPI langflow · 1.9.1에서 수정 · GHSA-4hmc-cfm3-w43c · 2026. 10. 15.

치명취약점

Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass

PyPI langflow · 1.9.1에서 수정 · GHSA-cf6m-vc3m-7cgm · 2026. 10. 15.

치명취약점

Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation

PyPI langflow · 1.10.1에서 수정 · GHSA-8qpj-27x8-pwpq · 2026. 10. 15.

중간취약점

Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

PyPI langflow 외 1개 · 1.10.1에서 수정 · GHSA-gh98-4phw-6fmw · 2026. 10. 15.

높음취약점

Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write

PyPI langflow · 1.10.3에서 수정 · GHSA-4f6c-2vvp-gw82 · 2026. 10. 15.

치명취약점

Langflow: Weak Fernet Key via random.seed()

PyPI langflow · 1.10.1에서 수정 · GHSA-jxw3-mjmx-3pqm · 2026. 10. 15.

치명취약점

Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

PyPI langflow 외 2개 · 1.10.3에서 수정 · GHSA-w794-rj3p-xv45 · 2026. 10. 15.

높음취약점

Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description

PyPI langflow · 1.10.1에서 수정 · GHSA-w584-2h2r-2hvf · 2026. 10. 15.

높음취약점

Langflow: Prompt injection in Langflow Smart Transform can lead to code execution

PyPI langflow · 1.10.3에서 수정 · GHSA-9fpm-3445-2vx4 · 2026. 10. 15.

중간취약점

Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling)

PyPI langflow 외 3개 · 1.10.3에서 수정 · GHSA-j8f7-x8jm-wmm4 · 2026. 10. 6.

중간취약점

Langflow: Logout button does not clear session

PyPI langflow · 1.7.0에서 수정 · GHSA-7hw8-6q6r-4276 · 2026. 9. 25.

치명취약점

Langflow: Unauthenticated RCE in Shareable Playgrounds

PyPI langflow · 1.9.2에서 수정 · GHSA-v5ff-9q35-q26f · 2026. 7. 20.

중간취약점

Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read

PyPI langflow · 1.10.0에서 수정 · GHSA-rcjh-r59h-gq37 · 2026. 7. 20.

중간취약점

Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint

PyPI langflow · 1.9.0에서 수정 · GHSA-79ph-745m-6wxq · 2026. 7. 20.

높음취약점

Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints

PyPI langflow · 1.9.0에서 수정 · GHSA-9c59-2mvc-vfr8 · 2026. 7. 20.

높음취약점

Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check

PyPI langflow 외 1개 · 1.5.1에서 수정 · GHSA-8c4j-f57c-35cf · 2026. 7. 14.

낮음취약점

Langflow vulnerable to injection

PyPI langflow · 수정 버전 없음 · GHSA-v66p-f7x3-4794 · 2026. 7. 14.

중간취약점

Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API

PyPI langflow-base · 0.9.1에서 수정 · GHSA-vvfc-fp59-m92g · 2026. 7. 14.

낮음취약점

Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint

PyPI langflow · 1.9.1에서 수정 · GHSA-9jpj-cph8-w449 · 2026. 7. 14.

최근 14일

AI·LLM 관련 항목

전체61

치명·높음33

악성 패키지2

실제 악용0

자주 나온 패키지

최근 28일

mcp-atlassianPyPI25
vllmPyPI23
open-webuiPyPI18
litellmPyPI

수집 상태

OSV 30분 · KEV 6시간 주기

CISA KEV2026. 10. 27.
OSV · crates.io2026. 10. 27.
OSV · Go2026. 10. 27.
OSV · npm2026. 10. 27.
OSV · PyPI2026. 10. 27.

13

pydantic-aiPyPI9