TI-2026-05783 Aliases CVE-2026-6596 GHSA-vvfc-fp59-m92g

langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted upload

MEDIUM 64CWE-284Published 2026-04-20 · Updated 2026-04-20

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Security bypass, Code execution
Confidentiality · integrity · availability: Low · Low · Low
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-284 and CWE-434.

Summary

A security flaw has been discovered in langflow-ai langflow up to 1.1.0. This issue affects the function create_upload_file of the file src/backend/base/Langflow/api/v1/endpoints.py of the component API Endpoint. The manipulation results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00284 21st percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix Fixed langflow-base (PyPI): 0.9.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Langflow	langflow	1.0; 1.1.0	—	No fix listed	CNA
—	langflow-base (PyPI)	before 0.9.1	0.9.1	Patch available	GHSA-vvfc-fp59-m92g

langflow VendorLangflow Affected 1.0; 1.1.0 Fixed in — No fix listed CNA
langflow-base (PyPI) Vendor— Affected before 0.9.1 Fixed in 0.9.1 Patch available GHSA-vvfc-fp59-m92g

CPE names CNA · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:langflow:langflow::::::::	—	—	Langflow

cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:* Versions — — ·Langflow

Remediation

Fix · GHSA-vvfc-fp59-m92g langflow-base (PyPI) Fixed in 0.9.1 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-6596
2026-10-03 Alias added: GHSA-vvfc-fp59-m92g

References

Exploit 1

https://gist.github.com/chenhouser2025/c2aabfdee41009cfe45d28a9924742a0

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-6596

Other 3

TI-2026-08085 Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation KEVCVSS 3.1CRITICAL 9.8
TI-2026-00553 Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote… KEVCVSS 3.0CRITICAL 9.8
TI-2025-24427 Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE KEVCVSS 4.0CRITICAL 9.4
TI-2025-02845 Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code KEVCVSS 3.1CRITICAL 9.8
TI-2026-25463 Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint KEVCVSS 4.0CRITICAL 9.3
TI-2026-39928 Authorization bypass in langflow KEVCVSS 3.1HIGH 8.4

See all 236 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences