Threat intelligence / Vulnerability
CVE-2026-55255
Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.
Vulnerability
TypeVulnerability
External ID—
First seen2026-07-07
Last seen2026-07-07
Confidence
—
Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.
Labels
CISA KEV context
Vendor / productLangflow Langflow
Added2026-07-07
Due date2026-07-10
1 recorded
Relationships
2 external