CVE-2026-55446
2 advisories.
PyPI/langflow CVE-2026-55446: high 7.5, EPSS 0.58%
Langflow: Unauthenticated DoS through multipart form boundary file upload
Action: Upgrade langflow to 1.0.19 or later.
pip install langflow==1.0.19Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.19 | - |
Fixed versions
| 1.0.19 |
Sources
- osv: GHSA-qwqc-p3q8-wcg9
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-qwqc-p3q8-wcg9
- https://github.com/langflow-ai/langflow/pull/3923
- https://github.com/langflow-ai/langflow
- https://github.com/langflow-ai/langflow/blob/v1.0.18/src/backend/base/langflow/api/v1/files.py#L40
CVE-2026-55446 · published · modified · JSON
PyPI/langflow CVE-2026-55446: high 7.5, EPSS 0.58%
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.0.19, an attacker can send a /api/v1/files/upload/ request without any authentication token/cookies and abuse
Action: Upgrade langflow to 1.0.19 or later.
pip install langflow==1.0.19Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.19 | - |
Fixed versions
| 1.0.19 |
Sources
- osv: PYSEC-2026-223
- https://github.com/langflow-ai/langflow/pull/3923
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-qwqc-p3q8-wcg9
CVE-2026-55446 · published · modified · JSON