CVE-2026-55255CISA KEVEPSS p57.9%

CVE-2026-55255Langflow Authorization Bypass Through User-Controlled Key Vulnerability

Langflow / Langflow

Description

Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.

Scoring

CVSS 8.4 ()
VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
EPSS0.89% probability of exploitation · percentile 57.9% · 2026-10-05T12:00:23Z
Last modified2026-07-08

CISA KEV entry

Added to KEV: 2026-07-07

Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.