CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2025-57760
Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers where an authenticated user with RCE access can invoke the internal CLI command langflow superuser to create a new administrative user. This results in full superuser access, even if the user initially registered through the UI as a regular (non-admin) account. A patched version has not been made public at this time.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
- CWE
- CWE-269
- Published
- Modified
- Record from
- the NVD, synced
Affected
- langflow:langflow
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-4gv9-mp8m-592r | PyPI | langflow | <1.5.1 | 1.5.1 |
| GHSA-4gv9-mp8m-592r | PyPI | langflow-base | <0.5.1 | 0.5.1 |
| PYSEC-2025-243 | PyPI | langflow | <1.5.0 | 1.5.0 |
| PYSEC-2026-1526 | PyPI | langflow-base | <0.5.1 | 0.5.1 |