Critical · published July 17, 2026
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 98.1th percentile for exploit probability.
🚨 Unauthenticated access to superuser tokens? Yes, please! Attackers can leverage Langflow's API to mint themselves the keys to the kingdom, and with great power comes great potential for chaos! 🔥 Think of it like a restaurant where anyone can walk in, grab a master key, and then head straight to the kitchen to cook whatever they want, all without showing any ID. It’s a recipe for disaster! An attacker could gain full control over the Langflow deployment, executing any command they desire. This means they could read sensitive data, alter configurations, and even wipe everything clean! Imagine the absolute devastation that could ensue from such unchecked access!
Think of it like a restaurant where anyone can walk in, grab a master key, and then head straight to the kitchen to cook whatever they want, all without showing any ID. It’s a recipe for disaster! This vulnerability allows unauthenticated attackers to exploit the auto-login feature to obtain superuser tokens, which they can then use to execute arbitrary code on the server via the validation API. It's a critical remote code execution (RCE) flaw that leaves default installations wide open!
An attacker could gain full control over the Langflow deployment, executing any command they desire. This means they could read sensitive data, alter configurations, and even wipe everything clean! Imagine the absolute devastation that could ensue from such unchecked access! Immediately upgrade Langflow to version 1.10.1 or later to patch this vulnerability. Additionally, consider implementing stricter authentication controls and monitoring API access to prevent unauthorized usage. Don't leave your kitchen door wide open! You've got this! Follow these steps, and you'll lock this vulnerability down in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| langflow/langflow | ≥ 1.0.0, < 1.10.1 | 1.10.1 |