CVE-2026-34046

{"id": "CVE-2026-34046", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-34046", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-03-31T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "langflow-ai", "product": "langflow", "versions": [{"status": "affected", "version": "< 1.5.1"}]}, {"vendor": "langflow-ai", "product": "langflow-base", "versions": [{"status": "affected", "version": "< 0.5.1"}]}]}], "published": "2026-03-27T21:17:27.753", "references": [{"url": "https://github.com/langflow-ai/langflow/pull/8956", "tags": ["Issue Tracking", "Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-8c4j-f57c-35cf", "tags": ["Patch", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-639"}, {"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.5.1, the `_read_flow` helper in `src/backend/base/langflow/api/v1/flows.py` branched on the `AUTO_LOGIN` setting to decide whether to filter by `user_id`. When `AUTO_LOGIN` was `False` (i.e., authentication was enabled), neither branch enforced an ownership check \u2014 the query returned any flow matching the given UUID regardless of who owned it. This allowed any authenticated user to read any other user's flow, including embedded plaintext API keys; modify the logic of another user's AI agents, and/or delete flows belonging to other users. The vulnerability was introduced by the conditional logic that was meant to accommodate public/example flows (those with `user_id = NULL`) under auto-login mode, but inadvertently left the authenticated path without an ownership filter. The fix in version 1.5.1 removes the `AUTO_LOGIN` conditional entirely and unconditionally scopes the query to the requesting user."}, {"lang": "es", "value": "Langflow es una herramienta para construir y desplegar agentes y flujos de trabajo impulsados por IA. Antes de la versi\u00f3n 1.5.1, el asistente \u2019_read_flow\u2019 en \u2019src/backend/base/langflow/api/v1/flows.py\u2019 se bifurcaba en la configuraci\u00f3n \u2019AUTO_LOGIN\u2019 para decidir si filtrar por \u2019user_id\u2019. Cuando \u2019AUTO_LOGIN\u2019 era \u2019False\u2019 (es decir, la autenticaci\u00f3n estaba habilitada), ninguna rama aplicaba una verificaci\u00f3n de propiedad - la consulta devolv\u00eda cualquier flujo que coincidiera con el UUID dado, independientemente de qui\u00e9n lo poseyera. Esto permit\u00eda a cualquier usuario autenticado leer el flujo de cualquier otro usuario, incluyendo claves API de texto plano incrustadas; modificar la l\u00f3gica de los agentes de IA de otro usuario, y/o eliminar flujos pertenecientes a otros usuarios. La vulnerabilidad fue introducida por la l\u00f3gica condicional que estaba destinada a acomodar flujos p\u00fablicos/de ejemplo (aquellos con \u2019user_id = NULL\u2019) bajo el modo de inicio de sesi\u00f3n autom\u00e1tico, pero inadvertidamente dej\u00f3 la ruta autenticada sin un filtro de propiedad. La correcci\u00f3n en la versi\u00f3n 1.5.1 elimina la condicional \u2019AUTO_LOGIN\u2019 por completo y limita incondicionalmente la consulta al usuario solicitante."}], "lastModified": "2026-10-26T22:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2B9A67D-F960-425C-B4EB-99EC59D6B425", "versionEndExcluding": "1.5.0"}, {"criteria": "cpe:2.3:a:langflow:langflow:1.5.0:dev0:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "433E1411-65A6-4938-B8EE-983C07145FC7"}, {"criteria": "cpe:2.3:a:langflow:langflow:1.5.0:dev1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85F6671F-A02B-4B74-AA22-09EA710B7130"}, {"criteria": "cpe:2.3:a:langflow:langflow-base:*:*:*:*:*:python:*:*", "vulnerable": true, "matchCriteriaId": "C364A228-0EEC-47C5-90A8-07A12DCF48D7", "versionEndExcluding": "0.5.1"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}