PyPI/langflow CVE-2026-55450: critical 9.3, EPSS 1.19%

Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak

Action: Upgrade langflow to 1.9.1 or later.

pip install langflow==1.9.1

Affected

Fixed versions

Sources

• osv: GHSA-x223-p2gf-v735
• https://github.com/langflow-ai/langflow/security/advisories/GHSA-x223-p2gf-v735
• https://github.com/langflow-ai/langflow/pull/12831
• https://github.com/langflow-ai/langflow

CVE-2026-55450 · published 2026-06-17T18:43:12Z · modified 2026-06-26T00:11:14.174707076Z · JSON