Langflow 1.5.0 Dev14
Approved changes feed: RSS · Atom
cpe:2.3:a:langflow:langflow:1.5.0:dev14:*:*:*:*:*:*
part: a version: 1.5.0 update: dev14
| Vendor | Langflow (7d20354c-ffd4-5617-af40-ca8e0a71d553) |
|---|---|
| Product | Langflow (5c65d387-bdc6-5574-bd7f-dfb80489ecd8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/langflow-ai/langflow |
purl2cpe | 2026-06-01 10:16:12.641098 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-57760 |
vulnerable | 2026-06-08 07:33:16.091529 |
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation
HIGH (8.8)
Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers where an authenticated user with RCE access can invoke the internal CLI command langflow superuser to create a new administrative user. This results in full superuser access, even if the user initially registered through the UI as a regular (non-admin) account. A patched version has not been made public at this time.
Published: 2025-08-25T16:22:17.772Z
Updated: 2025-08-25T20:34:14.809Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.