Known Exploited Vulnerabilities July 07, 2026 · CISA KEV Catalog

CVE-2026-55255: Langflow Authorization Bypass Through User-Controlled Key Vulnerability

Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-55255 Langflow
Related: CVE-2026-0770: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability Known Exploited Vulnerabilities · Jul 21, 2026
CVE-2025-34291: Langflow Origin Validation Error Vulnerability Known Exploited Vulnerabilities · May 21, 2026
CVE-2026-33017: Langflow Code Injection Vulnerability Known Exploited Vulnerabilities · Mar 25, 2026