Rating certificate · AW/26-09/09326 Sept 2026
58of 100
The Register / Agent-building platforms / Langflow
Register entry · Agent-building platforms · updated 26 Sept 2026
Langflow
Langflow is an open-source (MIT) low-code tool for building AI agents and workflows on a node canvas, with custom components written in Python. Flows can be served as APIs or exposed as MCP servers, and it runs self-hosted, via Langflow Desktop, or on a free hosted cloud offered by DataStax. DataStax, which acquired Langflow's creator Logspace in April 2024, is now part of IBM.
What reviewers and users praise
- Frequent releases (13 GitHub releases in the last 90 days)
- Users building small agents report it working well with MCP servers (Reddit)
- Seen by some users as more feature-complete than Flowise (Hacker News, Reddit)
What they criticise
- Multiple critical vulnerabilities, including an unauthenticated RCE (CVE-2026-33017) that CISA reported as actively exploited in March 2026
- Users report installation problems, instability and thin documentation (Reddit)
- No native pause-for-human-approval inside a flow, per user reports (Reddit)
Experts vs the crowdneeds both scores
Experts—
Crowd41
| Price | Free |
|---|---|
| Use it via | Web app, Desktop app, API, MCP server |
| Runs on | web, macos, windows, linux |
| Licence | MIT |
| Updated | Evidence collected 26 Sept 2026 |
How the rating was worked out
Weights for Agent-building platforms: adoption 35%, experts 35%, crowd 30%. Pillars without enough evidence are left out and the others re-weighted. The method.
| Adoption & momentumweight 35% | 73 | GitHub stars 155k → 97 · PyPI monthly downloads 40k → 25 · 13 releases in 90 days → 100reach × 0.7 + momentum × 0.3 |
|---|---|---|
| Expertsindependent reviews · weight 35% | — | No independent reviews found |
| Crowdcommunity sample · weight 30% | 41 | 11 dated posts from reddit, hackernews: 3 positive · 2 mixed · 6 negative (positive + ½ mixed) ÷ n, averaged toward 50 for small samples |
| Rating | 58 | Provisional: low confidence (2 of 3 pillars, 11 community posts). |
Editorial adjustment. Incident-history re-grade under methodology revision 2 (see the trust section).
Trust & safety
Seven dimensions graded A–D from documented facts. Overall: not enough data.
n/e
Permission model
No documented per-action approval mode for agent tool calls was found; a January 2026 user post says flows cannot pause for human input. Not graded without a doc page. source
n/e
Data access scope
Not established.
A
Data storage
Runs locally (Desktop, pip, Docker) or self-hosted; hosted cloud optional. source
n/e
Data retention & training
Self-hosted use keeps data local; retention/training terms of the DataStax hosted cloud not reviewed.
n/e
Incident history (24 months)
32 GitHub security advisories published 2024-09-26 to 2026-09-26, 15 rated critical. CVE-2026-33017 (unauthenticated RCE via the public flow build endpoint) was reported by CISA as actively exploited in March 2026; a further authenticated RCE via MCP stdio transport was published 2026-09-10. Regraded from D: Revision 2: D needs an unresolved issue or a slow or undisclosed fix, and C needs each issue fixed and disclosed; the evidence establishes neither, so this dimension is not graded. source
n/e
Compliance
No Langflow-specific attestation found on langflow.org. source
A
Transparency
MIT-licensed source with public GitHub release notes. source
The experts
0 named independent reviews found; dated reviews from the last 12 months are scored.
- None found.
The crowd
11 coded posts from reddit, hackernews.
3 positive2 mixed6 negative
- negative
I have Installed **Langflow** **Desktop** First and it is absolutely too slow to launch after installation.. then i tried Docker, it is also shows an error..
r/langflow · 13 Aug 2026 · reddit.com - negative
LangFlow executes synchronously and doesn’t support pausing mid flow for human input.
r/langflow · 12 Jan 2026 · reddit.com - mixed
Langflow is quite cool (although somewhat unstable), but I cannot use a loop within a loop.
r/langflow · 30 Dec 2025 · reddit.com - negative
I find that I cant really get to grips with it - I prefer to code over this!
r/langflow · 24 Dec 2025 · reddit.com - negative
Today I have been fighting all day with langflow as a newbie but there isn’t any documentation about it…
r/langflow · 28 Jan 2026 · reddit.com - mixed
the graph works beautifully in the Langflow UI
r/langflow · 25 Feb 2026 · reddit.com - positive
I built a simple coding agent using 3 Langflow components and 2 MCP servers and it worked quite well!
r/langflow · 11 Nov 2025 · reddit.com - positive
Hey everyone, I just joined this group and wanted to say how cool Lang Flow is.
r/langflow · 16 Oct 2025 · reddit.com
Pricing
As published, checked 26 Sept 2026.
| Plan | Price | Notes |
|---|---|---|
| Open source (self-hosted / Desktop) | Free | MIT licence. |
| Hosted cloud (DataStax) | Free | Homepage offers 'a free, enterprise-grade cloud to deploy your app'; paid tiers not listed on langflow.org. |
Recent changes
Ranked alongside
Other ranked entries in Agent-building platforms.
n8nn8n GmbH68
Sources
Every figure above traces to one of these, observed up to 26 Sept 2026.