Skip to content
OpenAdvisories
High · 8.8 CVE-2024-7297 EUVD-2024-48240GHSA-6j6g-j4qm-m9jf

Langflow Privilege Escalation

Published Jul 30, 2024 · Updated Mar 27, 2026 · Assigned by tenable

Description

Langflow versions prior to 1.0.13 suffer from a Privilege Escalation vulnerability, allowing a remote and low privileged attacker to gain super admin privileges by performing a mass assignment request on the '/api/v1/users' endpoint.

Affected products

VendorProductAffectedFixed
— langflow < 1.0.13 1.0.13

References