CVE-2026-55255

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoint allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request. This vulnerability is fixed in 1.9.1.

• CWE-639

• https://github.com/langflow-ai/langflow/commit/2c9f498d664a3c32698b57d7c5e752625291060ePatch
• https://github.com/langflow-ai/langflow/pull/12832Issue Tracking, Patch
• https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2Exploit, Mitigation, Vendor Advisory
• https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2Exploit, Mitigation, Vendor Advisory
• https://webflow.sysdig.com/blog/understanding-langflow-cve-2026-55255-and-why-higher-cvss-vulnerabilities-arent-always-the-most-exploitedThird Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-55255US Government Resource

Published

Jun 23, 2026

Last Modified

Jul 8, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55238xrdp is an open source RDP server. Versions 0.10.6 and prior…5.3
• CVE-2026-5524The Divi Form Builder plugin for WordPress is vulnerable to …9.8
• CVE-2026-55242ERPNext is a free and open source Enterprise Resource Planni…8.8
• CVE-2026-55249@rtk-ai/rtk-rewrite transparently rewrites shell commands ex…8.8
• CVE-2026-5525A stack-based buffer overflow vulnerability exists in Notepa…7.8
• CVE-2026-55254NCalc is a fast, lightweight expression evaluator for .NET. …4.8
• CVE-2026-5526A security flaw has been discovered in Tenda 4G03 Pro up to …9.8
• CVE-2026-5527A weakness has been identified in Tenda 4G03 Pro 1.0/1.0re/0…5.5
• CVE-2026-55276Always-Incorrect Control Flow Implementation vulnerability i…9.1
• CVE-2026-5528A security vulnerability has been detected in MoussaabBadla …6.3
• CVE-2026-5529A vulnerability was detected in Dromara lamp-cloud up to 5.8…4.3
• CVE-2026-5530A flaw has been found in Ollama up to 0.18.1. This issue aff…6.3