Tag
#Langflow
Critical Langflow Vulnerability CVE-2026-0768: Root-Level Backdoor in AI App Builder
A critical vulnerability, CVE-2026-0768, with a CVSS score of 9.8, has been actively exploited in Langflow, a widely deployed AI application platform. The vulnerability allows unauthenticated remote code execution as root, enabling attackers to harvest sensitive credentials and move laterally within networks. Immediate patching and enhanced monitoring are recommended.
Critical IDOR Vulnerability in Langflow: CVE-2026-33760
A critical IDOR (Insecure Direct Object Reference) vulnerability, CVE-2026-33760, with a CVSS score of 8.8, was discovered in Langflow, a tool for building and deploying AI-powered agents and workflows. This vulnerability allows any authenticated user to read, modify, or permanently delete another user's data by supplying the target's resource ID or flow_id. The vulnerability is fixed in Langflow version 1.9.0. Organizations using Langflow should immediately upgrade to version 1.9.0 or later to mitigate this vulnerability.