Browse / CVEs / CVE-2026-55255
CVE-2026-55255· langflow / langflow· CWE-639
Langflow Authorization Bypass Through User-Controlled Key Vulnerability
Exploited in the wild. Listed by CISA on 2026-07-07; known to be used by ransomware.
0.9%likelihood of exploitation, next 30 days
60%of all CVEs are less likely
Nonecheck to confirm it
Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from