PT-2025-34678 · Langflow · Langflow

Chaandrey · Published 2025-08-25 · Updated 2025-10-01 · CVE-2025-57760

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Langflow (affected versions not specified)

Description: Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers where an authenticated user with Remote Code Execution (RCE) access can invoke the internal CLI command langflow superuser to create a new administrative user. This results in full superuser access, even if the user initially registered through the UI as a regular (non-admin) account. The vulnerability allows bypassing frontend role enforcement and backend user integrity, leading to a full compromise of the Langflow application. Exploitation involves executing the langflow superuser command within the container, potentially through the /api/v1/validate/code API endpoint. This can lead to access to all user data, flows, stored credentials, and configuration, as well as potential credential leakage and the ability to run additional Langflow instances. Approximately 2.9k to 5.1k instances are exposed worldwide.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

RCE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-57760

GHSA-4GV9-MP8M-592R

Affected Products

Langflow

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/57xxx/CVE-2025-57760.json · Exploit
• https://github.com/langflow-ai/langflow/commit/c188ec113c9ca46154ad01d0eded1754cc6bef97 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-57760 · Security Note
• https://osv.dev/vulnerability/GHSA-4gv9-mp8m-592r · Vendor Advisory
• http://github.com/langflow-ai/langflow/pull/9152 · Patch
• https://osv.dev/vulnerability/CVE-2025-57760 · Vendor Advisory
• https://github.com/langflow-ai/langflow · Note
• https://github.com/langflow-ai/langflow/security/advisories/GHSA-4gv9-mp8m-592r · Note
• https://t.me/pentestingnews/66930 · Telegram Post
• https://twitter.com/HunterMapping/status/1960285594409410770 · Twitter Post
• https://twitter.com/Komodosec/status/1973206114645975219 · Twitter Post
• https://twitter.com/MiguelTur53069/status/1960735102125687241 · Twitter Post
• https://twitter.com/zoomeye_team/status/1960647062242116082 · Twitter Post
• https://twitter.com/CVEnew/status/1960021358659661995 · Twitter Post
• https://twitter.com/fridaysecurity/status/1960194845349224515 · Twitter Post