Trending
CVE-2026-55255

CVE detail

CVE-2026-55255

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoint allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request. This vulnerability is fixed in 1.9.1.

CVSS 8.4 · HighBuzz score 72.7KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 72.7

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 27.7 · diversity 20.0 · KEV 25.0 · OTX 0.0 · PoC 0.0

Mention score

27.7

15 evidence mentions in the snapshot

Diversity score

20.0

10 sources across 6 categories

KEV score

25.0

Known exploited vulnerability present

OTX score

0.0

0 OTX pulses

PoC score

0.0

0 repos · best confidence N/A

Best PoC traction

Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions: 1; within the 30d window
Peak daily: 1; highest bucket

Evidence

Source links by recency

Newest mentions first

15 source links · newest first

New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE AttackThe Hacker News
code endpoint without authentication, allowing any remote attacker to execute arbitrary Python on the server. The flaw, CVE-2025-3248 , carries a CVSS score of 9.8 and has been in CISA's Known Exploited Vulnerabilities catalog since May 5, 2025. As The Hacker News reported earlier this month, the prior operation used throwaway Python code and MySQL's
newsthehackernews.comJul 21, 2026, 7:34 AM
Security Affairs newsletter Round 585 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs
erica Breach Exposes 7 Million Driver’s Licenses After Employee Account Hack Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656) Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation A Hacker Claims 35 GB of Accenture Source Code. The Company
newssecurityaffairs.comJul 12, 2026, 4:58 AM
Turning software supply chain security into a daily habitHelp Net Security
ortion crew hijacks Microsoft 365 accounts via fake passkey setup Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656) Attackers using Langflow flaw for credential harvesting (CVE-2026-55255) Report: How to Implement a Continuous Offensive Security Testing Program Resources Download: Secure Foundations for AI Workloads on AWS Download:
newswww.helpnetsecurity.comJul 10, 2026, 5:30 AM
Attackers using Langflow flaw for credential harvesting (CVE-2026-55255)Help Net Security
The US Cybersecurity and Infrastructure Security Agency (CISA) is warning about yet another Langflow vulnerability (CVE-2026-55255) leveraged by attackers in the wild. The flaw was added to the agency’s Known Exploited Vulnerabilities catalog on Tuesday, July 7, nearly two weeks after the Sysdig Threat Research Team observed it being actively targe
newswww.helpnetsecurity.comJul 8, 2026, 2:03 PM
CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla FlawsSecurityWeek
at vulnerabilities in Adobe ColdFusion, Langflow, and two Joomla extensions have been exploited in the wild. Tracked as CVE-2026-48282 (CVSS score of 10/10), the ColdFusion bug was flagged as exploited only days after Adobe rolled out patches for it on June 30. It is a path traversal issue that allows attackers to execute arbitrary code. The Langflow s
newswww.securityweek.comJul 8, 2026, 10:45 AM
CISA orders feds to prioritize patching Langflow auth bypass flawBleepingComputer
g-and-drop interface to connect nodes into executable pipelines and a REST API to run them programmatically. Tracked as CVE-2026-55255 , this Insecure Direct Object Reference (IDOR) security flaw allows authenticated threat actors to access other users' flows by sending a maliciously crafted request to the /api/v1/responses endpoint with the victim's U
newswww.bleepingcomputer.comJul 8, 2026, 9:58 AM
U.S. CISA adds Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
Shaper SP Page Builder flaws to its Known Exploited Vulnerabilities (KEV) catalog . The flaws added to the catalog are: CVE-2026-48282 Adobe ColdFusion Path Traversal Vulnerability CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-55255 Langflow Authorization Bypass Through User-Controlled
newssecurityaffairs.comJul 8, 2026, 8:38 AM
CISA Adds Three Known Exploited Vulnerabilities to CatalogCISA Alerts
ee new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability CVE-2026-56290 Joomlack Page Builder Improp
governmentwww.cisa.govJul 7, 2026, 12:00 PM
22nd June – Threat Intelligence ReportCheck Point Research
rs showed how game-like prompts could expose credentials and user data. VULNERABILITIES AND PATCHES Cisco has addressed CVE-2026-20245, a high-severity command injection flaw in Catalyst SD-WAN Manager that attackers exploited as a zero-day for months. The flaw allows an administrator to run root commands through a crafted file, affecting on-premises a
vendorresearch.checkpoint.comJul 1, 2026, 11:29 AM
29th June – Threat Intelligence ReportCheck Point Research
rs showed how game-like prompts could expose credentials and user data. VULNERABILITIES AND PATCHES Cisco has addressed CVE-2026-20245, a high-severity command injection flaw in Catalyst SD-WAN Manager that attackers exploited as a zero-day for months. The flaw allows an administrator to run root commands through a crafted file, affecting on-premises a
vendorresearch.checkpoint.comJun 29, 2026, 2:06 PM
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-55255www.cisa.gov
No excerpt available.
Mitigationwww.cisa.govJun 23, 2026, 5:17 PM
https://webflow.sysdig.com/blog/understanding-langflow-cve-2026-55255-and-why-higher-cvss-vulnerabilities-arent-always-the-most-exploitedwebflow.sysdig.com
No excerpt available.
Third Party Advisorywebflow.sysdig.comJun 23, 2026, 5:17 PM
https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2github.com
No excerpt available.
Exploitgithub.comJun 23, 2026, 5:17 PM
https://github.com/langflow-ai/langflow/pull/12832github.com
No excerpt available.
Exploitgithub.comJun 23, 2026, 5:17 PM
https://github.com/langflow-ai/langflow/commit/2c9f498d664a3c32698b57d7c5e752625291060egithub.com
No excerpt available.
Exploitgithub.comJun 23, 2026, 5:17 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars

No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence

CVE-2026-9130
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users vi…
CVSS 7.1 · High
1 mention
CVE-2026-10700
IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in its file handling API that allow unauthorized access to user files.The /api/v1/file…
CVSS 6.5 · Medium
1 mention
CVE-2026-12945
IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthentica…
CVSS 7.1 · High
1 mention
CVE-2026-13445
IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolu…
CVSS 8.1 · High
1 mention
CVE-2026-10140
IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can m…
CVSS 9.6 · Critical
1 mention
CVE-2026-33760
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow's /api/v1/monitor router exposes 7 endpoints that perform read, write, and…
CVSS 8.8 · High
1 mention

External lookup

Potential internet exposure

Potential exposure only — not proof of vulnerability.Shodan results indicate potentially internet-exposed products, not confirmed vulnerable systems. They do not confirm that any returned system is vulnerable to CVE-2026-55255.

Product-level CPE searches intentionally omit version fields and NVD version-range or configuration certainty. Verify the exact product version and configuration independently.

Sign-in required. Shodan requires you to sign in to run these filter searches.

Product CPE queries

Derived from this CVE's existing NVD CPE 2.3 records; the application, operating-system, or hardware part is retained.

cpe:2.3:a:langflow:langflowSearch this product on Shodan

Exact CVE query

Eligible paid Shodan plan required

Shodan's exact vuln: filter is separate from the product searches above and requires an eligible paid Shodan plan.

vuln:CVE-2026-55255Search this CVE on Shodan

These are outbound search links only. cvebuzz makes no Shodan API call, uses no Shodan API key, and does not display live result counts.

Metadata

Canonical fields

NVD status

Analyzed

Published

Jun 23, 2026

Modified

Jul 8, 2026

Official record

Authoritative NVD record

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L

CWE IDs

Vendor classifications

How this vector reads

CVSS 3.1 base metrics decoded below. This explanation does not recalculate or change the NVD score.

Attack Vector (AV): Network. The vulnerable system can be reached across network boundaries.
Attack Complexity (AC): High. Successful exploitation depends on conditions outside the attacker's control.
Privileges Required (PR): Low. The attacker needs basic user-level privileges.
User Interaction (UI): None. Exploitation does not require another user to act.
Scope (S): Changed. Impacts can cross into a different security authority.
Confidentiality Impact (C): High. There is a total or serious impact to this security property.
Integrity Impact (I): High. There is a total or serious impact to this security property.
Availability Impact (A): Low. There is a limited impact to this security property.

Signals

Exploitation indicators

1 stored signals · KEV present · 0 OTX pulses

KEVKEV
- cwes: CWE-639
- dueDate: 2026-07-10
- knownRansomwareCampaignUse: Unknown
- notes: https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-55255
- product: Langflow
- requiredAction: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- shortDescription: Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.
- vendorProject: Langflow
- vulnerabilityName: Langflow Authorization Bypass Through User-Controlled Key Vulnerability
Observed Jul 7, 2026, 12:00 AM