DeutschShown in its original language — a full translation is planned for a future version.
Langflow: Mehrere Schwachstellen
view advisory published 2026-06-21
Ein Angreifer kann mehrere Schwachstellen in Langflow ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-55447US | — | — | ||
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the nod… | ||||
| CVE-2026-55446US | — | — | ||
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.0.19, an attacker can send a /api/v1/files/upload/ request without any authentication toke… | ||||
| CVE-2026-55423US | — | — | ||
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not clear the session. The previous user stays logged in unles… | ||||
| CVE-2026-55255US | —OT critical | KEV | ||
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoin… | ||||
| CVE-2026-12822US | high7.8 | — | ||
A vulnerability was identified in langflow-ai langflow up to 1.9.3. This affects an unknown function of the component Bundle URL Loader. The manipulation leads to code injection. T… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-fxq6-8jqq-rh9v vom 2026-06-21external
- GitHub Security Advisory GHSA-7hw8-6q6r-4276 vom 2026-06-21external
- GitHub Security Advisory GHSA-ccv6-r384-xp75 vom 2026-06-21external
- GitHub Security Advisory GHSA-qrpv-q767-xqq2 vom 2026-06-21external
- GitHub Security Advisory GHSA-qwqc-p3q8-wcg9 vom 2026-06-21external
- WID-SEC-W-2026-2030 - CSAF Versionself
- WID-SEC-2026-2030 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan