{"data":{"id":"aadae2dd-557a-4880-895d-7265c9e755a2","title":"GHSA-8c4j-f57c-35cf: Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check","summary":"Langflow's `_read_flow` helper in `src/backend/base/langflow/api/v1/flows.py` omitted an ownership check when `AUTO_LOGIN` was `False`, so any authenticated user could read, modify, or delete another user's flow via `GET/PATCH/DELETE /api/v1/flow/{flow_id}`. Exposed data included embedded plaintext API keys, and attackers could alter other users' AI agent logic. The flaw was introduced by conditional logic meant to support public example flows (`user_id = NULL`) under auto-login mode.","solution":"Fixed in PR #8956, which removes the `AUTO_LOGIN` conditional and unconditionally scopes the query to the requesting user with `Flow.user_id == user_id`. A cross-user isolation test, `test_read_flows_user_isolation`, was added to prevent regression.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-8c4j-f57c-35cf","publishedAt":"2026-03-27T19:36:23.000Z","cveId":"CVE-2026-34046","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langflow-base@<= 0.5.0 (fixed: 0.5.1)","langflow@<= 1.5.0 (fixed: 1.5.1)"],"affectedPackageNames":["langflow-base","langflow"],"affectedPackageRefs":["pypi:langflow","pypi:langflow-base"],"affectedVendors":[],"affectedVendorsRaw":["Langflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00477,"epssCheckedAt":"2026-11-10T00:11:22.175Z","kevDateAdded":null,"advisoryAliases":["GHSA-8c4j-f57c-35cf"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-03-27T19:36:23.000Z","fixReleasedAt":"2025-08-28T16:00:09.016Z","daysToFix":-211,"fixCheckedAt":"2026-10-29T21:39:22.263Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langflow-base","fixedVersion":"0.5.1","matchedVersion":"0.5.1","fixReleasedAt":"2025-08-28T16:00:09.016Z","daysToFix":-211,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:22.119Z"},{"ecosystem":"pypi","name":"langflow","fixedVersion":"1.5.1","matchedVersion":"1.5.1","fixReleasedAt":"2025-08-28T16:10:58.220Z","daysToFix":-211,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:22.119Z"}]}}