CVE-2026-55423CWE-613

Langflow: Logout button does not clear session

Medium · published June 23, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not clear the session. The previous user stays logged in unless another user explicitly logs in. This vulnerability is fixed in 1.7.0.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.0th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2026-06-23T16:27Z
EPSS history
Timeline
  • 23 JUN 16:27Z
    Langflow: Logout button does not clear session
    cvelistv5