{"data":{"id":"65d195e2-8f57-4f0c-9098-30d8d8b5c6ce","title":"GHSA-qrpv-q767-xqq2: Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow","summary":"GHSA-qrpv-q767-xqq2 is an insecure direct object reference (IDOR) in Langflow's `/api/v1/responses` endpoint. The helper `get_flow_by_id_or_endpoint_name` in `src/backend/base/langflow/helpers/flow.py` looks up flows by UUID without checking ownership, so any authenticated user can execute another user's flow by supplying its flow ID. The source says attackers can run any flow, access data its processing handles, and consume the victim's resources.","solution":"Fixed in PR #12832 (`fix(security): close IDOR in get_flow_by_id_or_endpoint_name`), merged 2026-04-22 and released in Langflow 1.9.1. The helper now enforces ownership on both the UUID and endpoint_name lookup branches, returns 404 for cross-user lookups, and fails closed on a malformed user_id.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-qrpv-q767-xqq2","publishedAt":"2026-06-19T21:16:46.000Z","cveId":"CVE-2026-55255","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langflow@< 1.9.1 (fixed: 1.9.1)"],"affectedPackageNames":["langflow"],"affectedPackageRefs":["pypi:langflow"],"affectedVendors":[],"affectedVendorsRaw":["Langflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"active","epssScore":0.00887,"epssCheckedAt":"2026-11-04T06:10:15.713Z","kevDateAdded":"2026-07-07","advisoryAliases":["GHSA-qrpv-q767-xqq2"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-19T21:16:46.000Z","fixReleasedAt":"2026-04-24T00:34:19.524Z","daysToFix":-56,"fixCheckedAt":"2026-10-29T21:34:10.009Z","capecIds":null,"crossRefCount":2,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langflow","fixedVersion":"1.9.1","matchedVersion":"1.9.1","fixReleasedAt":"2026-04-24T00:34:19.524Z","daysToFix":-56,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:09.862Z"}]}}