Skip to content
OpenAdvisories

Product · langflow-ai

langflow

42 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2026-55255 Exploited Public exploit

    Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

    Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoint allows an authenticated attacker to execute any flow belonging to another use…

    langflow-ai langflow langflow PyPI
    KEV Jul 7, 2026
  • High 8.8
    CVE-2026-5027 Public exploit Scanner template EPSS 40%

    Langflow - Path Traversal Arbitrary File Write via upload_user_file

    The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an attacker to write files to arbitrary locations on the filesystem using path traversal sequences ('../').

    langflow-ai langflow