Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
Affected range
ECOSYSTEM: introduced 0; fixed 1.9.1ECOSYSTEM: introduced 0; fixed 1.9.2Fixed versions: 1.9.1, 1.9.2
langflow
A Python package with a built-in web application
PyPI latest 1.12.2 MIT
Evidence path
Version, exploitation, severity
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
1
Latest version
1.12.2
No matching published advisory returned
2
Known exploitation
No KEV match
Checked by exact CVE identifier
3
Highest advisory severity
Critical
32 active advisories
Check an exact version
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Advisories
Langflow Unauth RCE
Affected range
ECOSYSTEM: introduced 0; fixed 1.3.0Fixed versions: 1.3.0
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint
Affected range
ECOSYSTEM: introduced 0; fixed 1.9.0Fixed versions: 1.9.0
Langflow CORS misconfiguration enables Account Takeover and RCE
Affected range
ECOSYSTEM: introduced 0; fixed 1.7.0Fixed versions: 1.7.0
Langflow affected by Remote Code Execution via validate_code() exec()
Affected range
ECOSYSTEM: introduced 0; last affected 1.7.3 GHSA-v5ff-9q35-q26f critical
Langflow: Unauthenticated RCE in Shareable Playgrounds
Affected range
ECOSYSTEM: introduced 0; fixed 1.9.2Fixed versions: 1.9.2
GHSA-5p5r-57fx-pmfr critical
Langflow vulnerable to remote code execution
Affected range
ECOSYSTEM: introduced 0; last affected 1.0.18 GHSA-3645-fxcv-hqr4 critical
Langflow has Remote Code Execution in CSV Agent
Affected range
ECOSYSTEM: introduced 0; last affected 1.8.0rc2 GHSA-9whx-c884-c68q critical
Langflow Knowledge Bases API is Vulnerable to Path Traversal
Affected range
ECOSYSTEM: introduced 0; fixed 1.9.0Fixed versions: 1.9.0
GHSA-ccv6-r384-xp75 critical
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
Affected range
ECOSYSTEM: introduced 0; fixed 1.9.2Fixed versions: 1.9.2
GHSA-x223-p2gf-v735 critical
Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak
Affected range
ECOSYSTEM: introduced 0; fixed 1.9.1Fixed versions: 1.9.1
GHSA-v8hw-mh8c-jxfc critical
Langflow has Authenticated Code Execution in Agentic Assistant Validation
Affected range
ECOSYSTEM: introduced 0; fixed 1.9.0Fixed versions: 1.9.0
GHSA-g2j9-7rj2-gm6c critical
Langflow has an Arbitrary File Write (RCE) via v2 API
Affected range
ECOSYSTEM: introduced 1.2.0; fixed 1.9.0Fixed versions: 1.9.0
GHSA-56m6-4mhw-h3g5 critical
langflow has vulnerability in PythonCodeTool component
Affected range
ECOSYSTEM: introduced 0; last affected 1.0.12 GHSA-qg33-x2c5-6p44 critical
Langflow remote code execution vulnerability
Affected range
ECOSYSTEM: introduced 0; fixed 1.0.15ECOSYSTEM: introduced 0; fixed 1.0.0a3Fixed versions: 1.0.15, 1.0.0a3
GHSA-9c59-2mvc-vfr8 high
Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints
Affected range
ECOSYSTEM: introduced 0; fixed 1.9.0Fixed versions: 1.9.0
GHSA-8c4j-f57c-35cf high
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
Affected range
ECOSYSTEM: introduced 0; fixed 1.5.1Fixed versions: 1.5.1
GHSA-c5cp-vx83-jhqx high
Langflow Missing Authentication on Critical API Endpoints
Affected range
ECOSYSTEM: introduced 0; fixed 1.7.1Fixed versions: 1.7.1
GHSA-4gv9-mp8m-592r high
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Affected range
ECOSYSTEM: introduced 0; fixed 1.5.1ECOSYSTEM: introduced 0; fixed 1.5.0Fixed versions: 1.5.1, 1.5.0
GHSA-5993-7p27-66g5 high
Langflow vulnerable to Server-Side Request Forgery
Affected range
ECOSYSTEM: introduced 0; fixed 1.7.1Fixed versions: 1.7.1
GHSA-qwqc-p3q8-wcg9 high
Langflow: Unauthenticated DoS through multipart form boundary file upload
Affected range
ECOSYSTEM: introduced 0; fixed 1.0.19Fixed versions: 1.0.19
GHSA-7grx-3xcx-2xv5 high
langflow has Unauthenticated IDOR on Image Downloads
Affected range
ECOSYSTEM: introduced 1.0.0; fixed 1.9.0Fixed versions: 1.9.0
GHSA-rf6x-r45m-xv3w high
Langflow is Missing Ownership Verification in API Key Deletion (IDOR)
Affected range
ECOSYSTEM: introduced 0; fixed 1.9.0Fixed versions: 1.9.0
GHSA-ph9w-r52h-28p7 high
langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
Affected range
ECOSYSTEM: introduced 0; fixed 1.7.1Fixed versions: 1.7.1
GHSA-f43r-cc68-gpx4 high
External Control of File Name or Path in Langflow
Affected range
ECOSYSTEM: introduced 0; fixed 1.7.1ECOSYSTEM: introduced 0; fixed 1.7.0Fixed versions: 1.7.1, 1.7.0
Show 7 more advisories
GHSA-rcjh-r59h-gq37 Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read
GHSA-79ph-745m-6wxq Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint
GHSA-v66p-f7x3-4794 Langflow vulnerable to injection
GHSA-9jpj-cph8-w449 Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint
GHSA-355v-2rjx-fpx7 Inefficient Regular Expression Complexity in langflow
GHSA-7hw8-6q6r-4276 Langflow: Logout button does not clear session
GHSA-5jjf-wcvf-923w Langflow has an Information Leak through Incomplete API Key Redaction