CVE-2026-55255

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoint allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request. This vulnerability is fixed in 1.9.1.

CVSS v3 8.4 HIGH

8.4^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://github.com/langflow-ai/langflow/commit/2c9f498d664a3c32698b57d7c5e752625291060e	Patch
https://github.com/langflow-ai/langflow/pull/12832	Issue Tracking Patch
https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2	Exploit Mitigation Vendor Advisory
https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2	Exploit Mitigation Vendor Advisory
https://webflow.sysdig.com/blog/understanding-langflow-cve-2026-55255-and-why-higher-cvss-vulnerabilities-arent-always-the-most-exploited	Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-55255	US Government Resource

Configurations

Configuration 1 (hide)

cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*

History

25 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Langflow es una herramienta para construir y desplegar agentes y flujos de trabajo impulsados por IA. Anteriormente a la 1.9.2, una vulnerabilidad de Referencia Directa a Objeto Insegura (IDOR) en el endpoint /api/v1/responses permite a un atacante autenticado ejecutar cualquier flujo perteneciente a otro usuario especificando el ID de flujo de la víctima en la solicitud. Esta vulnerabilidad está corregida en la 1.9.2.

Information

Published : 2026-06-23 17:17

Updated : 2026-10-25 23:10

NVD link : CVE-2026-55255

Mitre link : CVE-2026-55255

CVE.ORG link : CVE-2026-55255

JSON object : View

Products Affected

langflow

langflow

CWE

CWE-639

Authorization Bypass Through User-Controlled Key

{"id": "CVE-2026-55255", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-55255", "role": "CISA Coordinator", "options": [{"exploitation": "active"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-08T03:56:30.975870Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "langflow-ai", "product": "langflow", "versions": [{"status": "affected", "version": "< 1.9.1"}]}]}], "published": "2026-06-23T17:17:08.050", "references": [{"url": "https://github.com/langflow-ai/langflow/commit/2c9f498d664a3c32698b57d7c5e752625291060e", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/langflow-ai/langflow/pull/12832", "tags": ["Issue Tracking", "Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}, {"url": "https://webflow.sysdig.com/blog/understanding-langflow-cve-2026-55255-and-why-higher-cvss-vulnerabilities-arent-always-the-most-exploited", "tags": ["Third Party Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}, {"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-55255", "tags": ["US Government Resource"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoint allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request. This vulnerability is fixed in 1.9.1."}, {"lang": "es", "value": "Langflow es una herramienta para construir y desplegar agentes y flujos de trabajo impulsados por IA. Anteriormente a la 1.9.2, una vulnerabilidad de Referencia Directa a Objeto Insegura (IDOR) en el endpoint /api/v1/responses permite a un atacante autenticado ejecutar cualquier flujo perteneciente a otro usuario especificando el ID de flujo de la v\u00edctima en la solicitud. Esta vulnerabilidad est\u00e1 corregida en la 1.9.2."}], "lastModified": "2026-10-25T23:10:00.167", "cisaActionDue": "2026-07-10", "cisaExploitAdd": "2026-07-07", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5C0C925-9B95-4B10-BACE-5BBE5A9D24C5", "versionEndExcluding": "1.9.1"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com", "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "cisaVulnerabilityName": "Langflow Authorization Bypass Through User-Controlled Key Vulnerability"}