CVE record · 3 sources
CVE-2026-55255
KEVLangflow Authorization Bypass Through User-Controlled Key Vulnerability
- Vendor
- Langflow
- Product
- Langflow
- CISA KEV
- listed
- Exposure class
- AI infrastructure
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Langflow Authorization Bypass Through User-Controlled Key Vulnerability
Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.
-
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type…
-
July 2026 CVE Landscape
In July 2026, Insikt Group® identified 85 high-impact vulnerabilities that should be prioritized for remediation, 36 of which had a Very Critical Recorded Future Risk Score. This represents a 44% increase from last month.