CVE-2026-55450
2 advisories.
PyPI/langflow CVE-2026-55450: critical 9.3, EPSS 1.19%
Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak
Action: Upgrade langflow to 1.9.1 or later.
pip install langflow==1.9.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.1 | - |
Fixed versions
| 1.9.1 |
Sources
- osv: GHSA-x223-p2gf-v735
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-x223-p2gf-v735
- https://github.com/langflow-ai/langflow/pull/12831
- https://github.com/langflow-ai/langflow
CVE-2026-55450 · published · modified · JSON
PyPI/langflow CVE-2026-55450: critical 9.3, EPSS 1.19%
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitations. No need for an
Action: Upgrade langflow to 1.9.1 or later.
pip install langflow==1.9.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.1 | - |
Fixed versions
| 1.9.1 |
Sources
- osv: PYSEC-2026-224
- https://github.com/langflow-ai/langflow/pull/12831
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-x223-p2gf-v735
CVE-2026-55450 · published · modified · JSON