PyPI/langflow-base CVE-2026-6596: high 7.3, EPSS 0.28%
Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API
Action: Upgrade langflow-base to 0.9.1 or later.
pip install langflow-base==0.9.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.1 | - |
Fixed versions
| 0.9.1 |
Sources
- osv: GHSA-vvfc-fp59-m92g
- https://nvd.nist.gov/vuln/detail/CVE-2026-6596
- https://github.com/langflow-ai/langflow/commit/b5662446bc8c54d928e278d3d26ad95b62425815
- https://gist.github.com/chenhouser2025/c2aabfdee41009cfe45d28a9924742a0
- https://github.com/langflow-ai/langflow
- https://github.com/langflow-ai/langflow/commits/v1.9.1
- https://vuldb.com/submit/791919
- https://vuldb.com/vuln/358231
- https://vuldb.com/vuln/358231/cti
CVE-2026-6596 · published · modified · JSON