What is the official website of Langflow ?

The official website of Langflow is https://www.langflow.org/.

What is Langflow's cybersecurity risk score?

Langflow has an AI-generated cybersecurity risk score of 593 out of 1000, indicating a Very Poor security posture according to Rankiteo's assessment.

How many security incidents has Langflow experienced?

According to Rankiteo, Langflow currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Langflow been affected by any supply chain cyber incidents ?

According to Rankiteo, Langflow has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Langflow (Incident ID: TENHUAALI1783095935) Langflow (Incident ID: LAN1774536040) Langflow (Incident ID: 353844050725)

Does Langflow have SOC 2 Type 1 certification ?

According to Rankiteo, Langflow is not certified under SOC 2 Type 1.

Does Langflow have SOC 2 Type 2 certification ?

According to Rankiteo, Langflow does not hold a SOC 2 Type 2 certification.

Does Langflow comply with GDPR ?

According to Rankiteo, Langflow is not listed as GDPR compliant.

Does Langflow have PCI DSS certification ?

According to Rankiteo, Langflow does not currently maintain PCI DSS compliance.

Does Langflow comply with HIPAA ?

According to Rankiteo, Langflow is not compliant with HIPAA regulations.

Does Langflow have ISO 27001 certification ?

According to Rankiteo,Langflow is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Langflow operate in ?

Langflow operates primarily in the Software Development industry.

How many employees does Langflow have ?

Langflow employs approximately 17 people worldwide.

Does Langflow own any subsidiaries ?

Langflow presently has no subsidiaries across any sectors.

How many LinkedIn followers does Langflow have ?

Langflow's official LinkedIn profile has approximately 16,644 followers.

What is the NAICS classification code for Langflow ?

Langflow is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Langflow have a Crunchbase profile ?

No, Langflow does not have a profile on Crunchbase.

Does Langflow have a LinkedIn profile ?

Yes, Langflow maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/langflow.

How many cybersecurity incidents has Langflow experienced ?

As of August 29, 2026, Rankiteo reports that Langflow has experienced 8 cybersecurity incidents.

How many peer or competitor companies does Langflow have ?

Langflow has an estimated 30,744 peer or competitor companies worldwide.

What types of cybersecurity incidents has Langflow faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability, Cyber Attack and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Langflow

Boost Score +25 with badge (5 left)

593

/1000

Very Poor

618

/1000

Poor

Langflow Vendor Cyber Rating & Cyber Score

langflow.org

Add Your Compliance Badge

Langflow is a new, visual way to build, iterate and deploy AI apps.

Langflow A.I CyberSecurity Scoring

Scoring History

Langflow

Langflow CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Langflow

Cyber Attack

100

7/2026

GRACOMOLLOPELAN...

Langflow

Vulnerability

100

7/2026

LAN1785493493

Langflow

Ransomware

100

6/2026

Langflow

TENHUAALI178309...

Langflow

Vulnerability

100

5/2026

LAN1779452952

Langflow

Vulnerability

100

3/2026

LAN1781180750

Langflow

Vulnerability

100

3/2026

Langflow

LAN1774536040

Langflow

Vulnerability

100

3/2026

LAN1772548356

Langflow

Vulnerability

100

5/2025

Langflow

353844050725

Loading…

A.I.

Langflow Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Langflow

Incidents vs Software Development Industry Avg (This Year)

Langflow has 560.38% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Langflow has 579.61% more incidents than the average of all companies with at least one recorded incident.

Incident Types Langflow vs Software Development Industry Avg (This Year)

Langflow reported 7 incidents this year: 1 cyber attacks, 1 ransomware, 5 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - Langflow (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Langflow Subsidiaries

Parent Company

Langflow

Software Development

Website: https://www.langflow.org/

Company Size: 11-50 employees

No subsidiary data available for this company.

Loading…

Langflow Similar Companies

PayPal

paypal.com

We're championing possibilities for all by making money fast, easy, and more enjoyable. Our hope is to unlock opportunities for people in their everyday lives and empower the millions of people and businesses around the world who trust, rely, and use PayPal every day. For support, visit the PayPal Help Center. https://payp.al/help For employment opportunities, check out our job openings in the 'Jobs' tab. We're an equal opportunity employer that welcomes diversity, and offer generous benefits to help you thrive at work and in your free time. NMLS#910457: https://nmlsconsumeraccess.org/

Daraz

cb daraz.com

Founded in 2015, Daraz is the leading e-commerce platform in South Asia with operations in Pakistan, Bangladesh, Sri Lanka, Nepal, and Myanmar. It provides sellers and consumers with cutting-edge marketplace technology, targeting a rapidly growing region of over 500 million people. By building an integrated infrastructure covering e-commerce, logistics, payment and financial services, the company aims to deliver an immersive, personalized shopping experience and uplift South Asian communities through the power of commerce. Daraz has consistently invested in building an e-commerce ecosystem in South Asia through advancements in technology, logistics and digital payments. As digital penetration and consumer awareness have surged, the region is now ready for a transformative leap. Leveraging new-age advancements such as AI, Daraz is poised to further enhance the platform’s efficiency to enable a seamless experience for its consumers and sellers. Visit https://www.daraz.com/ to learn more.

Lazada

lazada.com

About Lazada Group Founded in 2012, Lazada Group is the leading eCommerce platform in Southeast Asia. We are accelerating progress in Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam through commerce and technology. With the largest logistics and payments networks in the region, Lazada is a part of our consumers’ daily lives in the region and we aim to serve 300 million shoppers by 2030. Since 2016, Lazada is the Southeast Asia flagship platform of the Alibaba Group powered by its cutting-edge technology infrastructure.

Alibaba Group

alibabagroup.com

🌍Alibaba Group is on a mission to make it easy to do business anywhere! Guided by our passion and imagination, we’re leading the way in AI, cloud computing and e-commerce. We aim to build the future infrastructure of commerce, and we aspire to be a good company that lasts for 102 years.

OpenText

cb opentext.com

OpenText is a leading Cloud and AI company that provides organizations around the world with a comprehensive suite of Business AI, Business Clouds, and Business Technology. We help organizations grow, innovate, become more efficient and effective, and do so in a trusted and secure way—through Information Management. OpenText (NASDAQ/TSX: OTEX), founded in 1991 in Waterloo, has a rich history of helping customers manage their most important asset—information. Originating from a collaboration to digitize the Oxford English Dictionary, OpenText has grown into a global leader in information management. With over 120,000 enterprise customers across 180 countries, OpenText supports 98 of the top 100 global companies. A wide breadth of offerings uniquely positions OpenText to help customers unlock the value of that information using Al, cloud, and security innovations. At OpenText, our culture is at the heart of everything we do—and today, that includes being proudly AI-first. We’re creating a workplace where everyone can thrive, with artificial intelligence integrated into how we work, solve problems, and innovate together. By fostering a collaborative and inclusive environment, we empower digital knowledge workers and drive forward-thinking solutions that shape the future of information management. We believe our success comes from the strength of our team—talent that AI can’t replace—and we’re committed to attracting and supporting those who bring unique insight, adaptability, and creativity. Because at OpenText, people aren’t just our greatest asset—they’re the reason we shine in an AI-powered world. Join us at OpenText and become part of a team where your talents and ideas are truly valued.

GlobalLogic

cb globallogic.com

GlobalLogic, a Hitachi Group company, is a trusted partner in design, data, and digital engineering for the world’s largest and most innovative companies. Since our inception in 2000, we have been at the forefront of the digital revolution, helping to create some of the most widely used digital products and experiences. Our purpose is to positively impact society and the planet through cutting-edge technology. Together with our clients, we are engineering impact through intelligent products, platforms, and services that are designed for desirability, engineered for excellence, and curated for intelligence. Our people-first culture fosters shoulder-to-shoulder teamwork, supported by a unique lab model and flexible delivery options, including onshore, nearshore, and offshore solutions. We also prioritize environmental stewardship in our product development and are committed to leveraging the diversity of thoughts as a driver for business innovation, attracting and developing talent, and sustainable growth. We are proud of our global recognitions: Leader in the ISG Provider Lens™ Digital Engineering Services 2024 U.S. report Everest Group's Software Product Engineering Services Peak Matrix 2024 Star Performer in Major Contender in Everest Group’s Trust & Safety Peak Matrix 2024 2024 EcoVadis Silver Sustainability Rating Join us as we continue to shape the future of digital engineering and create lasting impacts for businesses and communities worldwide: globallogic.com

Epic

epic.com

Join us in our mission to help the world get well, help the world stay well, and help future generations be healthier. We hire smart and motivated people from all academic majors to code, test, and implement healthcare software that hundreds of millions of patients and doctors rely on to improve care and ultimately save lives around the globe. No healthcare experience is necessary; we'll train you to be an expert in health IT and we'll provide you with personal development classes to grow as a professional. Our expectations for you are high, but in healthcare so are the stakes.

Databricks

databricks.com

Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and over 60% of the Fortune 500 — rely on Databricks to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified Data Intelligence Platform that includes Agent Bricks, Lakeflow, Lakehouse, Lakebase and Unity Catalog. --- Databricks applicants Please apply through our official Careers page at databricks.com/company/careers. All official communication from Databricks will come from email addresses ending with @databricks.com or @goodtime.io (our meeting tool).

HubSpot

hubspot.com

HubSpot is a leading CRM platform that provides software and support to help businesses grow better. Our platform includes marketing, sales, service, and website management products that start free and scale to meet our customers’ needs at any stage of growth. Today, thousands of customers around the world use our powerful and easy-to-use tools and integrations to attract, engage, and delight customers. HubSpot's award-winning culture has been recognized by Glassdoor, Great Place to Work, Comparably, Fortune, Entrepreneur, Inc., and more. We build connections, careers, and employee growth by creating a workplace that values flexibility, autonomy, and transparency. You can learn more about our commitment to creating an inclusive and diverse workplace in the HubSpot Culture Code. HubSpot is a hybrid company with employees working fully remotely, from an office, or a mix of the two. We are headquartered in Cambridge, MA with offices in Amsterdam, Berlin, Bogota, Dublin, Ghent, London, Madrid, Paris, San Francisco, Singapore, Sydney, Tokyo and Toronto. To learn more about HubSpot, visit www.hubspot.com and to join our team, visit www.hubspot.com/careers

Loading…

NEWS

Langflow CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 26, 2026 01:06 PM

CVE-2026-33017: Unauthenticated RCE in Langflow’s Public Flow Endpoint Explained

I found CVE-2026-33017, a Critical 9.3 unauthenticated RCE in Langflow, by looking at the code path the previous CISA KEV fix...

Read Article

March 25, 2026 03:56 PM

Warning: New critical vulnerability in Langflow. Patch Immediately!

Sources. https://nvd.nist.gov/vuln/detail/CVE-2026-33475. Risks. Langflow is a tool for building and deploying AI-powered agents and...

Read Article

March 25, 2026 07:00 AM

CISA Issues Urgent Warning on Langflow Code Injection Vulnerability Actively Exploited in Attacks

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about a critical code-injection vulnerability in...

Read Article

March 23, 2026 05:34 PM

Warning: Critical vulnerability in Langflow AI pipelines. Patch Immediately!

Last update: 23/03/2026; Affected software: Langflow AI pipelines; Type: Remote Code Execution (RCE); CVE/CVSS: CVE-2026-33017: 9.3...

Read Article

March 23, 2026 05:14 PM

Cloudflare's NET Jumps 2.56% During Trading Session as Market Volatility and Cybersecurity Demand Intensify

Cloudflare Stock Surges Amid Cybersecurity Concerns On March 23, 2026, Cloudflare (NET) saw its share price climb 2.56% to $220.94 during a...

Read Article

March 21, 2026 08:51 AM

Critical Langflow Vulnerability Exploited Within Hours of Public Disclosure

A critical security vulnerability in the open-source AI framework Langflow has been actively exploited by attackers within hours of its...

Read Article

March 20, 2026 03:15 PM

Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure

Langflow CVE-2026-33017 exploited in 20 hours after disclosure, enabling RCE via exec(), exposing systems before patching cycles.

Read Article

March 20, 2026 09:18 AM

Hackers exploit vulnerability of Langflow

A particularly concerning development is being recorded in the cyber security space, as attackers began exploiting critical vulnerability in...

Read Article

January 11, 2026 08:00 AM

Cyber Security Alert: 10 Most Dangerous Vulnerabilities of 2026 Actively Exploited in the Wild

2026's deadliest CVEs: Langflow AI RCE, SharePoint chains, WhatsApp zero-clicks actively exploited. Patch now—full list, impacts,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-81934

SUMMARY

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-81931

SUMMARY

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission (routine Seller role) to execute arbitrary JavaScript in the application origin. The photo validation rule classifies the file only by its content (magic bytes) and rejects only a fixed list of PHP extensions, while ProductSaveController::save() names the stored file using the client-supplied extension and copies it into the public web root. A file that begins with an image header and carries an HTML extension passes validation, is stored under public/asset/upload/product/, and is served with a text/html content type, turning the upload into first-party stored script execution.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: )

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-81893

SUMMARY

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write, potentially crashing the application. To exploit this flaw, an application using gdk-pixbuf must process the malicious JPEG image. Affected version >= 2.26.4

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 4.7)

cvss3

Base Score: 4.7

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

REFERENCES

CVE-2026-81838

SUMMARY

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal sequences. This could allow the third party to perform inappropriate actions in the diagram bundle. To remediate this issue, users should upgrade to the version 0.24 or later.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

cvss4

Base Score: 6.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

1.8

REFERENCES

CVE-2026-81834

SUMMARY

A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Multiple isses were reported to the vendor beforehand. They explain, that "they all apply to Roo Code, a project we no longer support - the repository was archived a while ago, and we don't encourage anyone to use it." This vulnerability only affects products that are no longer supported by the maintainer.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…