{"revision":"3186702ba2e7438c9111d679144f1480","evidence":{"cve":"CVE-2026-55255","kev":{"cve":"CVE-2026-55255","product":"Langflow","name":"Langflow Authorization Bypass Through User-Controlled Key Vulnerability","dateAdded":"2026-07-07","dueDate":"2026-07-10","knownRansomwareUse":false,"shortDescription":"Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.","vendor":"Langflow","isMicrosoft":false,"products":[],"advisoryUrl":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55255","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-55255"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"61924f429d10791d020d7189"}}