70/100
Six Metasploit modules target Langflow, including unauthenticated remote code execution. CVEs assigned but no active exploitation reported.