Auth bypass in Langflow
CVE-2026-55450
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitations. No need for any prior knowledge, only network access to Langflow. This can lead to space exhaustion on the server. In addition, in the response, the absolute path of the uploaded file is reported to the attacker, which is an information leak that can assist in chaining other primitives. This vulnerability is fixed in 1.9.1.
Vulnerability class: Information Disclosure
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.3 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H.
EPSS exploit prediction
EPSS 0.012, 68.2th percentile (scored ); unchanged over 30 days. About EPSS.
Affected products
- Langflow
- Langflow-Ai Langflow — versions < 1.9.1
Weakness classification (CWE)
Public exploits and proof-of-concept code
3 public repositories with exploit or proof-of-concept code for this CVE:
- 0xBlackash/CVE-2026-55450 (last pushed 2026-10-08): CVE-2026-55450
- 0xredash/CVE-2026-55450 (last pushed 2026-10-08): CVE-2026-55450
- ashrafzaryouh/CVE-2026-55450 (last pushed 2026-10-08): CVE-2026-55450
References
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-x223-p2gf-v735 (Exploit, Patch, Vendor Advisory)
- https://github.com/langflow-ai/langflow/pull/12831 (Patch, Issue Tracking)
This CVE has public exploit evidence. See the latest CVEs with public exploits.