Langflow Authorization Bypass Through User-Controlled Key Vulnerability
Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.
Read at CISA Known Exploited Vulnerabilities catalog
- Vendor
- Langflow
- Product
- Langflow
- CISA KEV
- listed
- Exploitation
- observed in the wild
- Fix
- available
- Exposure class
- AI infrastructure
Why it ranks 56 (Critical)
- CISA KEV listed
- Product class: AI infrastructure
- Covered by 2 independent sources
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Known Exploited Vulnerabilities catalog (nvd.nist.gov)
- CVE-2026-55255 on this site · NVD · CVE.org · Vulnpedia · KEV
Related coverage
Other items that share a CVE or were clustered with this one.