CVE-2026-55450

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitations. No need for any prior knowledge, only network access to Langflow. This can lead to space exhaustion on the server. In addition, in the response, the absolute path of the uploaded file is reported to the attacker, which is an information leak that can assist in chaining other primitives. This vulnerability is fixed in 1.9.1.

CVSS v3 9.3 CRITICAL

9.3^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/langflow-ai/langflow/pull/12831	Issue Tracking Patch
https://github.com/langflow-ai/langflow/security/advisories/GHSA-x223-p2gf-v735	Exploit Patch Vendor Advisory
https://github.com/langflow-ai/langflow/security/advisories/GHSA-x223-p2gf-v735	Exploit Patch Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*

History

25 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Langflow es una herramienta para construir y desplegar agentes y flujos de trabajo impulsados por IA. Antes de la versión 1.9.1, los usuarios no autenticados pueden subir cualquier cantidad de datos al servidor sin ninguna limitación. No se necesita ningún conocimiento previo, solo acceso a la red de Langflow. Esto puede llevar al agotamiento del espacio en el servidor. Además, en la respuesta, la ruta absoluta del archivo subido se informa al atacante, lo que es una fuga de información que puede ayudar a encadenar otras primitivas. Esta vulnerabilidad se corrige en la versión 1.9.1.

Information

Published : 2026-06-23 17:17

Updated : 2026-10-25 23:10

NVD link : CVE-2026-55450

Mitre link : CVE-2026-55450

CVE.ORG link : CVE-2026-55450

JSON object : View

Products Affected

langflow

langflow

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-306

Missing Authentication for Critical Function

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2026-55450", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-55450", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-23T17:00:33.147977Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.3, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "langflow-ai", "product": "langflow", "versions": [{"status": "affected", "version": "< 1.9.1"}]}]}], "published": "2026-06-23T17:17:08.663", "references": [{"url": "https://github.com/langflow-ai/langflow/pull/12831", "tags": ["Issue Tracking", "Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-x223-p2gf-v735", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-x223-p2gf-v735", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-306"}, {"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitations. No need for any prior knowledge, only network access to Langflow. This can lead to space exhaustion on the server. In addition, in the response, the absolute path of the uploaded file is reported to the attacker, which is an information leak that can assist in chaining other primitives. This vulnerability is fixed in 1.9.1."}, {"lang": "es", "value": "Langflow es una herramienta para construir y desplegar agentes y flujos de trabajo impulsados por IA. Antes de la versi\u00f3n 1.9.1, los usuarios no autenticados pueden subir cualquier cantidad de datos al servidor sin ninguna limitaci\u00f3n. No se necesita ning\u00fan conocimiento previo, solo acceso a la red de Langflow. Esto puede llevar al agotamiento del espacio en el servidor. Adem\u00e1s, en la respuesta, la ruta absoluta del archivo subido se informa al atacante, lo que es una fuga de informaci\u00f3n que puede ayudar a encadenar otras primitivas. Esta vulnerabilidad se corrige en la versi\u00f3n 1.9.1."}], "lastModified": "2026-10-25T23:10:00.167", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5C0C925-9B95-4B10-BACE-5BBE5A9D24C5", "versionEndExcluding": "1.9.1"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}