CVE-2026-55255 Langflow-Ai Langflow
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoint allows an authenticated attacker to execute any flow belonging to another…
- CVSS
- 8.4 High
- EPSS
- 0.9%
- Percentile
- 60
- Published
- 2026-06-23
- Force
- 9 of 12
- Public PoC
- 1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
On CISA’s exploited list
Langflow Authorization Bypass Through User-Controlled Key Vulnerability
- Added
- 2026-07-07
- Federal patch deadline
- 2026-07-10
- Ransomware use
- not known