HIGHVulnerability
Verified
Global

CISA KEV: Langflow Langflow — Langflow Authorization Bypass Through User-Controlled Key Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.

Analysis

Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request. Added to CISA Known Exploited Vulnerabilities catalog on 2026-07-07. Remediation due: 2026-07-10.

Indicators of Compromise (1)

CVE (1)
CVE-2026-55255
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jul 7, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

UniCredit, Accenture, and IBM join forces for pan-European banking expansion

UniCredit, one of Europe's leading pan-European banking groups, Accenture and IBM have announced a long-term strategic collaboration that establishes the technology foundation supporting UniCredit's growth across the thirteen European markets in which the Group operates.

Finextra
MEDIUMVulnerabilityNEW

South African crypto platform Luno to axe 20% of staff

Digital Currency Group’s crypto exchange Luno will cut 20% of its global staff in restructures, Bloomberg reported on Tuesday.

Finextra
MEDIUMVulnerability

Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks

Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no further operator input in the session. The operator, tracked through the aliases knaithe and KnYuan,

The Hacker News