{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/langflow--1.9.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.3,"id":"CVE-2026-55450"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-0XBLACKASH-CVE-2026-55450\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["Langflow (\u003c 1.9.1)"],"_cs_severities":["high"],"_cs_tags":["denial-of-service","unauthenticated-access","information-leak","web-vulnerability","langflow"],"_cs_type":"advisory","_cs_vendors":["Langflow"],"content_html":"\u003cp\u003eA critical vulnerability, CVE-2026-55450, has been identified in Langflow, affecting all versions prior to 1.9.1. This flaw allows unauthenticated attackers with network access to a Langflow instance to upload files of any size to the server's local filesystem through the deprecated \u003ccode\u003e/api/v1/upload/{flow_id}\u003c/code\u003e endpoint. The vulnerability stems from a lack of authentication and file size validation on this endpoint. Exploitation can lead to severe resource exhaustion, specifically disk space depletion, which results in a Denial-of-Service (DoS) condition for the Langflow application and potentially the host system. Furthermore, the server's response to successful uploads includes the absolute path of the saved file, disclosing sensitive system information that could aid in chaining further attacks. This vulnerability was reported via GitHub Advisory GHSA-x223-p2gf-v735.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAn unauthenticated attacker identifies a publicly accessible Langflow instance running a vulnerable version (prior to 1.9.1).\u003c/li\u003e\n\u003cli\u003eThe attacker sends an HTTP POST request to the deprecated and unauthenticated \u003ccode\u003e/api/v1/upload/{flow_id}\u003c/code\u003e endpoint (e.g., \u003ccode\u003ehttp://langflow_host:7860/api/v1/upload/A_VALID_UUID\u003c/code\u003e) using a tool like \u003ccode\u003ecurl\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThe request includes a large file as \u003ccode\u003emultipart/form-data\u003c/code\u003e, specified via the \u003ccode\u003e-F \u0026quot;file=@\u0026lt;any_file\u0026gt;\u0026quot;\u003c/code\u003e parameter.\u003c/li\u003e\n\u003cli\u003eDue to the absence of authentication checks and file size validation on this endpoint, the Langflow application's \u003ccode\u003esave_uploaded_file\u003c/code\u003e function processes and writes the attacker's large file directly to the local filesystem, within a cache directory structure derived from the provided \u003ccode\u003eflow_id\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThe attacker repeatedly performs these large file uploads, consuming increasing amounts of disk space on the Langflow server.\u003c/li\u003e\n\u003cli\u003eUpon each successful upload, the server returns an HTTP 201 Created status, and the response body contains the absolute path to the newly saved file on the server (e.g., \u003ccode\u003e/Users/ori/Library/Caches/langflow/A_VALID_UUID/filename.txt\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eThe continuous and uncontrolled writing of large files leads to the exhaustion of available disk space, resulting in a Denial-of-Service condition for the Langflow application and potentially critical system functions.\u003c/li\u003e\n\u003cli\u003eThe leaked absolute file paths expose details about the server's directory structure, which can be leveraged by the attacker for subsequent reconnaissance or to craft more sophisticated attacks like path traversal or local file inclusion.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe primary impact of CVE-2026-55450 is the potential for a complete Denial-of-Service (DoS) for the affected Langflow application and its host system. Unauthenticated attackers can exhaust server disk space by continuously uploading large files, rendering the application inoperable and potentially destabilizing the entire server. Additionally, the vulnerability leads to an information leak, where absolute file paths on the server are disclosed in response to file uploads. While the source does not provide victim numbers or specific targeted sectors, any organization deploying Langflow versions prior to 1.9.1 is at risk of operational disruption and reconnaissance from this flaw. The leaked path information could facilitate further, more targeted attacks.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ePatch CVE-2026-55450 immediately\u003c/strong\u003e: Upgrade Langflow installations to version 1.9.1 or later to mitigate the unauthenticated upload and disk exhaustion vulnerabilities.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDeploy the Sigma rules in this brief\u003c/strong\u003e: Implement \u003ccode\u003eDetects CVE-2026-55450 Exploitation - Unauthenticated Langflow Upload\u003c/code\u003e and \u003ccode\u003eDetects CVE-2026-55450 Exploitation - Successful Unauthenticated Langflow Upload\u003c/code\u003e into your SIEM to detect attempted and successful exploitation.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eEnable comprehensive web server logging\u003c/strong\u003e: Ensure detailed HTTP access logs are enabled for the web server hosting Langflow, capturing \u003ccode\u003ecs-method\u003c/code\u003e, \u003ccode\u003ecs-uri-stem\u003c/code\u003e, \u003ccode\u003esc-status\u003c/code\u003e, and \u003ccode\u003ec-ip\u003c/code\u003e to effectively utilize the detection rules provided.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eMonitor disk space utilization\u003c/strong\u003e: Implement alerts for critical disk space thresholds on systems hosting Langflow to identify potential DoS attacks.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-22T08:46:57Z","date_published":"2026-06-17T18:47:54Z","id":"https://feed.craftedsignal.io/briefs/2026-06-langflow-unauthenticated-file-upload-dos-info-leak/","summary":"An unauthenticated file upload vulnerability, CVE-2026-55450, in Langflow versions prior to 1.9.1 allows remote attackers to upload arbitrary amounts of data to the server via the `/api/v1/upload/{flow_id}` endpoint, leading to disk space exhaustion and Denial-of-Service, additionally leaking the absolute file path in the server's response.","title":"Langflow Unauthenticated File Upload Leads to DoS and Information Leak (CVE-2026-55450)","url":"https://feed.craftedsignal.io/briefs/2026-06-langflow-unauthenticated-file-upload-dos-info-leak/"}],"language":"en","title":"CraftedSignal Threat Feed - Langflow (\u003c 1.9.1)","version":"https://jsonfeed.org/version/1.1"}