Skip to content
OpenAdvisories
High WID-SEC-2026-0900 4 CVEs

Langflow: Mehrere Schwachstellen

Published Mar 29, 2026 · Updated Jun 10, 2026 · Revision 2 · de-DE

Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Langflow ausnutzen, um Informationen offenzulegen, Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.

Product

Langflow bietet eine visuelle Schnittstelle zum Erstellen von LLM-basierten Anwendungen.

Vulnerabilities 4

  • High 8.8
    CVE-2026-5027 Public exploit Scanner template EPSS 41%

    Langflow - Path Traversal Arbitrary File Write via upload_user_file

    The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an attacker to write files to arbitrary locations on the filesystem using path traversal sequences ('../').

    langflow-ai langflow
  • High 7.0
    CVE-2026-5026

    Langflow - Stored XSS via Malicious SVG Upload

    The '/api/v1/files/images/{flow_id}/{file_name}' endpoint serves SVG files with the 'image/svg+xml' content type without sanitizing their content. Since SVG files can contain embedded JavaScript, an attacker can upload a malicious SVG that executes arbitrary …

    langflow-ai langflow
  • Medium 6.5
    CVE-2026-5025

    Langflow - Application Logs Exposed to All Authenticated Users

    The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer. These endpoints only require basic authentication ('get_current_active_user') without any privilege checks (e.g., 'is_superuser').

    langflow-ai langflow
  • Medium 6.3
    CVE-2026-5022

    Langflow - Missing Authorization on download_image Endpoint

    The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowing any unauthenticated user to download images belonging to any flow by knowing (or guessing) the flow ID and file name.

    langflow-ai langflow

Revision history

  1. #2

    Aktive Ausnutzung gemeldet

  2. #1

    Initiale Fassung

References