CVE-2026-55423

6.1 Moyenne

Publiée le 23/06/2026 à 19:17 · Modifiée le 24/06/2026 à 15:50 · Analysée par le NVD · Source : security-advisories@github.com

Description

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not clear the session. The previous user stays logged in unless another user explicitly logs in. This vulnerability is fixed in 1.7.0.

Traduire en français

Produits concernés

langflow-ai langflow
Langflow langflow

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.1 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N`

Faiblesses (CWE)

CWE-613

Références

https://github.com/langflow-ai/langflow/pull/10527 Issue TrackingPatch
https://github.com/langflow-ai/langflow/pull/10528 Issue TrackingExploit
https://github.com/langflow-ai/langflow/security/advisories/GHSA-7hw8-6q6r-4276 Vendor AdvisoryExploitPatch

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories