CVE-2026-55423

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not clear the session. The previous user stays logged in unless another user explicitly logs in. This vulnerability is fixed in 1.7.0.

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 5.2

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/langflow-ai/langflow/pull/10527	Issue Tracking Patch
https://github.com/langflow-ai/langflow/pull/10528	Issue Tracking Exploit
https://github.com/langflow-ai/langflow/security/advisories/GHSA-7hw8-6q6r-4276	Vendor Advisory Exploit Patch

Configurations

Configuration 1 (hide)

cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*

History

25 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Langflow es una herramienta para construir y desplegar agentes y flujos de trabajo impulsados por IA. Antes de la versión 1.7.0, el botón de cerrar sesión no borra la sesión. El usuario anterior permanece conectado a menos que otro usuario inicie sesión explícitamente. Esta vulnerabilidad se corrige en la versión 1.7.0.

Information

Published : 2026-06-23 17:17

Updated : 2026-10-25 23:10

NVD link : CVE-2026-55423

Mitre link : CVE-2026-55423

CVE.ORG link : CVE-2026-55423

JSON object : View

Products Affected

langflow

langflow

CWE

CWE-613

Insufficient Session Expiration

{"id": "CVE-2026-55423", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-55423", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-23T17:06:31.440801Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 0.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "langflow-ai", "product": "langflow", "versions": [{"status": "affected", "version": "< 1.7.0"}]}]}], "published": "2026-06-23T17:17:08.283", "references": [{"url": "https://github.com/langflow-ai/langflow/pull/10527", "tags": ["Issue Tracking", "Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/langflow-ai/langflow/pull/10528", "tags": ["Issue Tracking", "Exploit"], "source": "security-advisories@github.com"}, {"url": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-7hw8-6q6r-4276", "tags": ["Vendor Advisory", "Exploit", "Patch"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-613"}]}], "descriptions": [{"lang": "en", "value": "Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not clear the session. The previous user stays logged in unless another user explicitly logs in. This vulnerability is fixed in 1.7.0."}, {"lang": "es", "value": "Langflow es una herramienta para construir y desplegar agentes y flujos de trabajo impulsados por IA. Antes de la versi\u00f3n 1.7.0, el bot\u00f3n de cerrar sesi\u00f3n no borra la sesi\u00f3n. El usuario anterior permanece conectado a menos que otro usuario inicie sesi\u00f3n expl\u00edcitamente. Esta vulnerabilidad se corrige en la versi\u00f3n 1.7.0."}], "lastModified": "2026-10-25T23:10:00.167", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D34B381-00FD-4F7D-8B5F-96C3C152B852", "versionEndExcluding": "1.7.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}