HIGH8.8PyPI
GHSA-4gv9-mp8m-592r· CVE-2025-57760, PYSEC-2025-243Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Modified: 7/13/2026
package
PyPI/langflow-base
pkg:pypi/langflow-base
HIGHPyPI
GHSA-8c4j-f57c-35cf· CVE-2026-34046, PYSEC-2026-2567Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
Modified: 7/13/2026
HIGHPyPI
GHSA-c5cp-vx83-jhqx· CVE-2026-21445, PYSEC-2026-1524Langflow Missing Authentication on Critical API Endpoints
Modified: 7/13/2026
CRITICALPyPI
GHSA-rvqx-wpfh-mfx7· CVE-2025-3248, PYSEC-2025-36Langflow Unauth RCE
Modified: 6/29/2026
HIGH7.3PyPI
GHSA-vvfc-fp59-m92g· CVE-2026-6596, PYSEC-2026-2572Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API
Modified: 7/13/2026
HIGH8.8PyPI
PYSEC-2026-1526· CVE-2025-57760, GHSA-4gv9-mp8m-592rLangflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Modified: 7/13/2026
—PyPI
PYSEC-2026-2570· CVE-2026-34046, GHSA-8c4j-f57c-35cfLangflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
Modified: 7/13/2026
—PyPI
PYSEC-2026-2571· CVE-2026-21445, GHSA-c5cp-vx83-jhqxLangflow Missing Authentication on Critical API Endpoints
Modified: 7/13/2026
HIGH7.3PyPI
PYSEC-2026-2572· CVE-2026-6596, GHSA-vvfc-fp59-m92gLangflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API
Modified: 7/13/2026
—PyPI
PYSEC-2026-380· CVE-2025-3248, GHSA-rvqx-wpfh-mfx7Langflow Unauth RCE
Modified: 7/1/2026