sign in--:--:--UTC

CVE-2025-34291

exploited in the wild☆ pin

CVSS

9.4

Reports

5

First seen

May 21, 2026

Last seen

Jul 8, 2026

Affected product

Langflow

Associated actors

MuddyWater ×3 Cavern Manticore ×1 Lone operator (45.207.216.55) ×1 Lyceum ×1

Recent reports

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog

The Hacker NewsJul 8, 2026 High

Iran-Linked Cavern Manticore Uses New C2 Framework to Target Israeli Organizations

The Hacker NewsJul 6, 2026 High

Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE

The Hacker NewsJun 10, 2026 Critical

CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV Catalog

The Hacker NewsMay 22, 2026 High

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesMay 21, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans