CVE-2026-33484
Langflow is a tool for building and deploying AI-powered agents and workflows.
Published Mar 24, 2026 · updated Jun 17, 2026 · langflow langflow
Langflow is a tool for building and deploying AI-powered agents and workflows. In versions 1.0.0 through 1.8.1, the endpoint serves image files without any authentication or ownership check. Any unauthenticated request with a known flow_id and file_name returns the image with HTTP 200. In a multi-tenant deployment, any attacker who can discover or guess a (UUIDs can be leaked through other API responses) can download any user's uploaded images without credentials. Version 1.9.0 contains a patch.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 24, 2026 · NIST NVD
Detected
Langflow is a tool for building and deploying AI-powered agents and workflows. In versions 1.0.0 through 1.8.1, the endpoint serves image files without any authentication or ownership check. Any unauthenticated request with a known flow_id and file_name returns the image with HTTP 200. In a multi-tenant deployment, any attacker who can discover or guess a (UUIDs can be leaked through other API res
Jun 17, 2026 · NIST NVD
Updated
Langflow is a tool for building and deploying AI-powered agents and workflows. In versions 1.0.0 through 1.8.1, the endpoint serves image files without any authentication or ownership check. Any unauthenticated request with a known flow_id and file_name returns the image with HTTP 200. In a multi-tenant deployment, any attacker who can discover or guess a (UUIDs can be leaked through other API res
Affected
- cpe langflow/langflowversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-33484
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-33484
Langflow is a tool for building and deploying AI-powered agents and workflows. In versions 1.0.0 through 1.8.1, the endpoint serves image files without any authentication or ownership check. Any unauthenticated request with a known flo
nvd.nist.gov