Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-33760— Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints

CVSS 8.8 · High EPSS 0.29% · P21

Affected Version Matrix 1

VendorProductVersion RangeStatus
langflow-ailangflow< 1.9.0affected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-33760

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints
Source: NVD (National Vulnerability Database)
Vulnerability Description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow's /api/v1/monitor router exposes 7 endpoints that perform read, write, and delete operations on user-owned resources — messages, sessions, build artifacts, and LLM transaction logs — without verifying that the authenticated requester owns the targeted resource. Any authenticated user can read, modify, rename, or permanently delete another user's data by supplying the target's resource ID or flow_id. This is a classic IDOR/BOLA vulnerability. Notably, the same source file (monitor.py) contains one correctly-implemented endpoint that uses an ownership check, demonstrating the correct pattern was known but inconsistently applied. This vulnerability is fixed in 1.9.0.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: NVD (National Vulnerability Database)
Vulnerability Title
Langflow 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Langflow是Langflow团队开源的一个用于构建多代理和 RAG 应用程序的可视化框架。 Langflow 1.9.0之前版本存在授权问题漏洞，该漏洞源于/api/v1/monitor路由中的7个端点未验证认证用户对资源的归属权，可能导致已认证用户通过提供目标资源ID或flow_id读取、修改、重命名或永久删除其他用户的数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
langflow-ailangflow < 1.9.0 -

II. Public POCs for CVE-2026-33760

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium
Qwen3.6-35B-A3B · 8209 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-33760

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-33760 (1)

Same Patch Batch · langflow-ai · 2026-06-23 · 9 CVEs total

CVE-2026-485199.6 CRITICALLangflow: Unauthenticated RCE in Shareable Playgrounds
CVE-2026-554479.6 CRITICALLangflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
CVE-2026-554509.3 CRITICALLangflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak
CVE-2026-552558.4 HIGHLangflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attacker
CVE-2026-554467.5 HIGHLangflow: Unauthenticated DoS through multipart form boundary file upload
CVE-2026-428676.5 MEDIUMLangflow: Path Traversal in Knowledge Bases API via Creation Endpoint
CVE-2026-485206.1 MEDIUMLangflow: Unauthenticated Shareable Playground arbitrary local or S3 file read
CVE-2026-554236.1 MEDIUMLangflow: Logout button does not clear session

IV. Related Vulnerabilities

Same product: langflow
Same vendor: langflow-ai
Same weakness: CWE-639

V. Comments for CVE-2026-33760

No comments yet

Leave a comment