CVE-2026-21445 Scanner
CVE-2026-21445 Scanner - Missing Authorization vulnerability in Langflow
Used 3k times · 5.9k assets checked · url
CVE
CVE-2026-21445
8.8
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories, and perform destructive operations including message deletion. This affects endpoints handling personal data and system operations that should require proper authorization. Version 1.7.0.dev45 contains a patch.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
langflow
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: langflow
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →