langflow vulnerabilities (Root)

2 vulnerabilities.

• langflow Root Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow CVE-2026-55255 In KEVPublic exploitFix available 8.4 HighJune 19, 2026
• langflow Root Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE CVE-2025-34291 In KEVPublic exploitFix available EPSS 93.2% 9.4 CriticalDecember 5, 2025