SecurityOnlineDo Son
Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)
Part of the CVE-2026-55450 story · since 19 Jun
Quiet for 18 weekslast report 26 Jun2 articles1 outlet
- Fri 19 Jun, 02:21 UTC. SecurityOnline, first report. Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450). This article, 1st of 2.
- Fri 26 Jun, 02:20 UTC. SecurityOnline. Critical flaws in Langflow allow data theft and DoS, patch urged.
A critical vulnerability (CVE-2026-55450) in Langflow, an open-source platform, allows unauthenticated users to upload unlimited data, leading to potential denial-of-service conditions and information leaks. The CVSS score is 9.3, indicating a high severity. The flaw, due to missing authentication on the endpoint, affects versions prior to 1.9.1. A patch correcting the issue is available in version 1.9.1, which enforces authentication and limits upload sizes. Exploitation is made easier by a publicly available proof-of-concept.
How the story developed
Quiet for 18 weekslast report 26 Jun2 articles1 outlet
2 articles from 1 outlet since 19 Jun. Quiet since 26 Jun. This was the first report.
- Fri 19 Jun, 02:21 UTC. SecurityOnline, first report. Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450). This article, 1st of 2.
- Fri 26 Jun, 02:20 UTC. SecurityOnline. Critical flaws in Langflow allow data theft and DoS, patch urged.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 2 articles as a listHide the list
- Fri 19 JunDay 01
- Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)02:21 · SecurityOnline · First report · This article, 1st of 2
Quiet for 7 days
Fri 26 JunDay 71- Critical flaws in Langflow allow data theft and DoS, patch urged02:20 · SecurityOnline · Picked up again