What is the CVSS score of CVE-2026-21445?

CVE-2026-21445 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.1%.

Which versions of AI / ML are affected by CVE-2026-21445?

Organizations using Langflow face critical risk from CVE-2026-21445, a missing authentication vulnerability rated CVSS 9.1.. A patch is available.

Is there a public PoC exploit available for CVE-2026-21445?

Yes, a public proof-of-concept exploit is available for CVE-2026-21445. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-21445?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Audit authentication configurations and rotate any potentially compromised credentials.

AI / ML CVE-2026-21445

CRITICAL

Missing Authentication for Critical Function (CWE-306)

2026-01-02 security-advisories@github.com

GHSA-c5cp-vx83-jhqx

Authentication Bypass AI / ML Langflow

9.1

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Jan 16, 2026 - 18:32 vuln.today

Public exploit code

Patch released

Jan 16, 2026 - 18:32 nvd

Patch available

CVE Published

Jan 02, 2026 - 20:16 nvd

CRITICAL 9.1

DescriptionGitHub Advisory

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories, and perform destructive operations including message deletion. This affects endpoints handling personal data and system operations that should require proper authorization. Version 1.7.0.dev45 contains a patch.

AnalysisAI

Langflow before 1.7.0.dev45 exposes multiple API endpoints without authentication, allowing unauthenticated access to user conversations, transaction data, and message deletion. Critical for AI workflow platforms that handle sensitive prompt data.

Technical ContextAI

Multiple API endpoints handling personal conversation data and transaction histories lack authentication controls (CWE-306). An attacker can read all user conversations (potentially containing sensitive prompts and AI responses), view transaction histories, and delete messages without any credentials.

RemediationAI

Update to Langflow 1.7.0.dev45 or later. Never expose Langflow to the internet without authentication. Audit conversation logs for sensitive data exposure.