HIGH 8.8 PyPI
GHSA-4gv9-mp8m-592r · CVE-2025-57760 Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Modified: 12/18/2025
package
pkg:pypi/langflow-base
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Modified: 12/18/2025
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
Modified: 3/27/2026
Langflow Missing Authentication on Critical API Endpoints
Modified: 2/3/2026
Langflow Unauth RCE
Modified: 4/2/2026
Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API
Modified: 5/5/2026