HighVulnerability
GHSA-7grx-3xcx-2xv5: langflow has Unauthenticated IDOR on Image Downloads
- Identifiers
- CVE-2026-33484GHSA-7grx-3xcx-2xv5
- Published
- Record updated
- Affected
- langflow >= 1.0.0, <= 1.8.1
- Fixed in
- No fixed version was stated when the source was last read.
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 5.9%
Summary
The `/api/v1/files/images/{flow_id}/{file_name}` endpoint in langflow serves image files without authentication or an ownership check. Any unauthenticated request that includes a known `flow_id` and `file_name` returns the image with HTTP 200. In multi-tenant deployments, an attacker who can obtain a flow UUID, which other API responses may leak, can download any user's uploaded images without credentials.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- langflowPyPIReaches an LLM package through dependencies
Related items
- MediumGoogle: LLMjacking attacks rack up $1 million in cloud AI chargesSimilar attack · BleepingComputer
- LowExtracting System Prompt of LLM Services in Complex (Agentic) Settings: Hierarchical Optimization and Reliable Evaluation MetricsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoMCP Tool Poisoning in Agentic AI Frameworks: A Cross-Framework Measurement StudySimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- MediumHow We Took Over ChatGPT AccountsSimilar attack · Simon Willison's Weblog
- Medium“Black October” for AI Developer PlatformsSimilar attack · Wiz Research Blog