PT-2026-26771 · Langflow · Langflow

Akshatgit · Published 2026-03-20 · Updated 2026-03-24 · CVE-2026-33484

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Langflow versions 1.0.0 through 1.8.1

Description Langflow versions 1.0.0 through 1.8.1 have an issue where the /api/v1/files/images/{flow id}/{file name} API endpoint serves image files without authentication or ownership verification. An unauthenticated request with a known flow id and file name will successfully retrieve the image, returning an HTTP 200 response. In a multi-tenant environment, an attacker who can discover or guess a flow id can download images uploaded by any user without authorization. The flow id is a UUID that may be exposed through other API responses. The vulnerable function is download image located in src/backend/base/langflow/api/v1/files.py:138-164.

Recommendations Versions prior to 1.9.0 are affected. Update to version 1.9.0 or later to resolve this issue.

Exploit

Fix

Missing Authorization

IDOR

Improper Access Control

Weakness Enumeration

CWE-862

CWE-639

CWE-284

Related Identifiers

CVE-2026-33484

GHSA-7GRX-3XCX-2XV5

PYSEC-2026-80

Affected Products

Langflow

References · 9

• 🔥 https://github.com/langflow-ai/langflow/security/advisories/GHSA-7grx-3xcx-2xv5 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33484.json · Exploit
• https://osv.dev/vulnerability/PYSEC-2026-80 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-33484 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7grx-3xcx-2xv5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33484 · Security Note
• https://github.com/langflow-ai/langflow · Note
• https://twitter.com/VulmonFeeds/status/2036526414854250718 · Twitter Post
• https://twitter.com/CVEnew/status/2036505789276496158 · Twitter Post