CVE-2026-34046

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.5.1, the `_read_flow` helper in `src/backend/base/langflow/api/v1/flows.py` branched on the `AUTO_LOGIN` setting to decide whether to filter by `user_id`. When `AUTO_LOGIN` was `False` (i.e., authentication was enabled), neither branch enforced an ownership check — the query returned any flow matching the given UUID regardless of who owned it. This allowed any authenticated user to read any other user's flow, including embedded plaintext API keys; modify the logic of another user's AI agents, and/or delete flows belonging to other users. The vulnerability was introduced by the conditional logic that was meant to accommodate public/example flows (those with `user_id = NULL`) under auto-login mode, but inadvertently left the authenticated path without an ownership filter. The fix in version 1.5.1 removes the `AUTO_LOGIN` conditional entirely and unconditionally scopes the query to the requesting user.

• CWE-639
• CWE-862

• https://github.com/langflow-ai/langflow/pull/8956Issue Tracking, Patch
• https://github.com/langflow-ai/langflow/security/advisories/GHSA-8c4j-f57c-35cfPatch, Vendor Advisory

Published

Mar 27, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34040Moby is an open source container framework. Prior to version…7.8
• CVE-2026-34041act is a project which allows for local running of github ac…9.8
• CVE-2026-34042act is a project which allows for local running of github ac…8.2
• CVE-2026-34043Serialize JavaScript to a superset of JSON that includes reg…7.5
• CVE-2026-34044Coolify is an open-source and self-hostable tool for managin…7.7
• CVE-2026-34045Podman Desktop is a graphical tool for developing on contain…9.1
• CVE-2026-34047Coolify is an open-source and self-hostable tool for managin…9.9
• CVE-2026-34048Coolify is an open-source and self-hostable tool for managin…9.9
• CVE-2026-34049Coolify is an open-source and self-hostable tool for managin…3.3
• CVE-2026-3405A vulnerability has been found in thinkgem JeeSite up to 5.1…8.1
• CVE-2026-34050Coolify is an open-source and self-hostable tool for managin…6.5
• CVE-2026-34051OpenEMR is a free and open source electronic health records …5.4