ByteOS Network

NVD Vulnerability Details :

CVE-2026-55450

Undergoing Analysis

Source-security-advisories@github.com

Published At-23 Jun, 2026 | 17:17

Updated At-23 Jun, 2026 | 18:18

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitations. No need for any prior knowledge, only network access to Langflow. This can lead to space exhaustion on the server. In addition, in the response, the absolute path of the uploaded file is reported to the attacker, which is an information leak that can assist in chaining other primitives. This vulnerability is fixed in 1.9.1.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	9.3	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H
			N/A

Type: Secondary

Version: 3.1

Base score: 9.3

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H

Type: N/A

Version:

Base score:

Base severity: N/A

Vector:

Weaknesses

CWE ID	Type	Source
CWE-200	Secondary	security-advisories@github.com
CWE-306	Secondary	security-advisories@github.com
CWE-400	Secondary	security-advisories@github.com

CWE ID: CWE-200

Type: Secondary

Source: security-advisories@github.com

CWE ID: CWE-306

Type: Secondary

Source: security-advisories@github.com

CWE ID: CWE-400

Type: Secondary

Source: security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/langflow-ai/langflow/pull/12831	security-advisories@github.com	N/A
https://github.com/langflow-ai/langflow/security/advisories/GHSA-x223-p2gf-v735	security-advisories@github.com	N/A
https://github.com/langflow-ai/langflow/security/advisories/GHSA-x223-p2gf-v735	134c704f-9b21-4f2e-91b3-4a467353bcc0	N/A