Langflow IDOR Vulnerability Allows Unauthorized Flow Execution

# Langflow IDOR Vulnerability Allows Unauthorized Flow Execution

https://gcdradar.vercel.app/incidents/langflow-idor-vulnerability-allows-unauthorized-flow-executi · AIR-2026-0026 · closed 2026-07-07

- Lane: Patch now
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2026-06-19 (happened 2026-06-23)
- AI role: Attack on AI
- Products: Langflow
- CVE ids: CVE-2026-55255
- CVSS: 8.4

## Summary

Langflow prior to version 1.9.1 contains an Insecure Direct Object Reference vulnerability in its API responses endpoint. Attackers can execute arbitrary flows belonging to other users, with exploitation confirmed in the wild.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-06-23: CVE-2026-55255: Langflow is a tool for building and deploying AI-powered agents and workflows. (https://nvd.nist.gov/vuln/detail/CVE-2026-55255)
- 2026-06-19: CVE-2026-55255: Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow (https://github.com/advisories/GHSA-qrpv-q767-xqq2)

## Sources

- 2026-06-19 GitHub Advisory Database: CVE-2026-55255: Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow https://github.com/advisories/GHSA-qrpv-q767-xqq2
- 2026-06-23 NVD: CVE-2026-55255: Langflow is a tool for building and deploying AI-powered agents and workflows. https://nvd.nist.gov/vuln/detail/CVE-2026-55255

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.