Question 1

What is CVE-2026-55255 — Langflow Authorization Bypass Through User-Controlled Key Vulnerability?

Accepted Answer

Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.

Question 2

What is the authoritative source for CVE-2026-55255?

Accepted Answer

Langflow Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-55255) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	8.4 ()
Vector	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
EPSS	29.05% probability of exploitation · percentile 98.0% · 2026-08-08T12:02:54Z
Last modified	2026-07-08

CVE-2026-55255Langflow Authorization Bypass Through User-Controlled Key Vulnerability

Description

Scoring

CISA KEV entry