Skip to content
Threat Feed
Subscribe

Product

Langflow (< 1.9.1)

1 brief RSS
high advisory

Langflow Unauthenticated File Upload Leads to DoS and Information Leak (CVE-2026-55450)

An unauthenticated file upload vulnerability, CVE-2026-55450, in Langflow versions prior to 1.9.1 allows remote attackers to upload arbitrary amounts of data to the server via the `/api/v1/upload/{flow_id}` endpoint, leading to disk space exhaustion and Denial-of-Service, additionally leaking the absolute file path in the server's response.

PoC Langflow denial-of-service unauthenticated-access information-leak web-vulnerability
2r 3t 1c updated