CWE-200: Exposure of Sensitive Information to an Unauthorized Actor in langflow-ai langflow (CVE-2026-55450)
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitations. No need for any prior knowledge, only network access to Langflow. This can lead to space exhaustion on the server. In addition, in the response, the absolute path of the uploaded file is reported to the attacker, which is an information leak that can assist in chaining other primitives. This vulnerability is fixed in 1.9.1.
AI Analysis
Technical Summary
CVE-2026-55450 affects langflow, a tool for building AI-powered agents and workflows. Before version 1.9.1, unauthenticated attackers with network access can upload arbitrary amounts of data without restriction, causing denial of service via disk space exhaustion. The server also leaks the absolute file path of uploaded files in its response, resulting in an information disclosure vulnerability (CWE-200). The vulnerability is resolved in langflow 1.9.1.
Potential Impact
An attacker can exhaust server disk space by uploading unlimited data, causing denial of service (availability impact). The exposure of absolute file paths leaks sensitive server information, which may facilitate further attacks. Confidentiality is partially impacted due to this information disclosure. Integrity is not affected.
Mitigation Recommendations
Upgrade langflow to version 1.9.1 or later, where this vulnerability is fixed. Prior to upgrading, restrict network access to the langflow server to trusted users only to prevent unauthenticated uploads.
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor in langflow-ai langflow (CVE-2026-55450)
Description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitations. No need for any prior knowledge, only network access to Langflow. This can lead to space exhaustion on the server. In addition, in the response, the absolute path of the uploaded file is reported to the attacker, which is an information leak that can assist in chaining other primitives. This vulnerability is fixed in 1.9.1.
CVSS v3.1
Score 9.3critical
Affected software
pkg:github/langflow-ai/langflowRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-55450 affects langflow, a tool for building AI-powered agents and workflows. Before version 1.9.1, unauthenticated attackers with network access can upload arbitrary amounts of data without restriction, causing denial of service via disk space exhaustion. The server also leaks the absolute file path of uploaded files in its response, resulting in an information disclosure vulnerability (CWE-200). The vulnerability is resolved in langflow 1.9.1.
Potential Impact
An attacker can exhaust server disk space by uploading unlimited data, causing denial of service (availability impact). The exposure of absolute file paths leaks sensitive server information, which may facilitate further attacks. Confidentiality is partially impacted due to this information disclosure. Integrity is not affected.
Mitigation Recommendations
Upgrade langflow to version 1.9.1 or later, where this vulnerability is fixed. Prior to upgrading, restrict network access to the langflow server to trusted users only to prevent unauthenticated uploads.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_base
- Csaf Version
- 2.0
- Publisher
- Bundesamt für Sicherheit in der Informationstechnik
- Advisory Id
- WID-SEC-W-2026-1970
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a32cff89f87a2db092d9eb7
Added to database: 06/17/2026, 16:48:56 UTC
Last enriched: 06/24/2026, 18:30:19 UTC
Last updated: 07/31/2026, 23:06:01 UTC
Views: 125
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.