CVE-2026-55450

Langflow Security Vulnerabilities Expose AI Systems Diagram of Langflow security vulnerabilities CVE-2026-55255 CVE-2026-55447 CVE-2026-55450

Langflow Security Vulnerabilities Expose AI Systems

Do Son June 26, 2026

TL;DR Three critical Langflow security vulnerabilities expose artificial intelligence applications to severe risks. Attackers could execute arbitrary...

Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450) Langflow file upload flaw enabling unauthenticated denial-of-service and path leak (CVE-2026-55450)

Langflow file upload flaw enabling unauthenticated denial-of-service and path leak (CVE-2026-55450)

Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)

Do Son June 19, 2026

Unauthenticated upload exposes Langflow servers A newly published Langflow file upload flaw lets anyone with network...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-1207CVSS 5.4
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on...
Admin intel📅 Updated: Jul 10, 2026
CVE-2026-48939CVSS 10.0
A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment...
CISA KEV📅 Added to KEV: Jul 10, 2026
CVE-2026-56291CVSS 10.0
The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files...
CISA KEV📅 Added to KEV: Jul 10, 2026
CVE-2026-55255CVSS 8.4
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct...
CISA KEV📅 Added to KEV: Jul 7, 2026
CVE-2026-48908
A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in...
CISA KEV📅 Added to KEV: Jul 7, 2026
CVE-2026-56290
The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable...
CISA KEV📅 Added to KEV: Jul 7, 2026
CVE-2026-20896CVSS 9.8
Gitea Docker image: `REVERSE_PROXY_TRUSTED_PROXIES = *` default lets any source IP impersonate any user via `X-WEBAUTH-USER`
Admin intel📅 Updated: Jul 6, 2026
CVE-2026-48282CVSS 10.0
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted...
Admin intelCISA KEV📅 Added to KEV: Jul 7, 2026📅 Updated: Jul 3, 2026

Critical Alert 2 Active Exploits Detected Today

Langflow Security Vulnerabilities Expose AI Systems

Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)