CVE-2026-33484highCWE-284CWE-639CWE-862

CVE-2026-33484: high-severity vulnerability in langflow-ai langflow

Langflow has Unauthenticated IDOR on Image Downloads

Published

Follow this CVE+ Monitor langflow+ Monitor langflow

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 6.1%
In short

Langflow allows anyone to download user-uploaded images without logging in or having permission. An attacker who knows the flow ID can steal images from any user, including sensitive files.

Technical detail

The `/api/v1/files/images/{flow_id}/{file_name}` endpoint lacks authentication and authorization checks, enabling unauthenticated IDOR attacks. Flow IDs (UUIDs) can be discovered through other API responses, allowing attackers in multi-tenant environments to enumerate and exfiltrate arbitrary image files with HTTP 200 responses.

Summary generated and translated by AI from the official description.
Langflow is a tool for building and deploying AI-powered agents and workflows. In versions 1.0.0 through 1.8.1, the `/api/v1/files/images/{flow_id}/{file_name}` endpoint serves image files without any authentication or ownership check. Any unauthenticated request with a known flow_id and file_name returns the image with HTTP 200. In a multi-tenant deployment, any attacker who can discover or guess a `flow_id` (UUIDs can be leaked through other API responses) can download any user's uploaded images without credentials. Version 1.9.0 contains a patch.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
langflow-ai · langflow
Related CVEs — langflow-ai langflow

In the same product, most dangerous first.

CVE-2025-3248CRITICALLangflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/codeEPSS 100.0%KEVCVE-2026-33017CRITICALLangflow has Unauthenticated Remote Code Execution via Public Flow Build EndpointEPSS 96.4%KEVCVE-2026-55255HIGHLangflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's FlowEPSS 0.9%KEVCVE-2026-5027HIGHLangflow - Path Traversal Arbitrary File Write via upload_user_fileEPSS 40.0%CVE-2026-27966CRITICALLangflow has Remote Code Execution in CSV AgentEPSS 35.2%CVE-2026-21445HIGHLangflow Missing Authentication on Critical API EndpointsEPSS 33.3%