Langflow CVE-2026-5022

Despite the absence of a CVSS score and vector, this vulnerability presents moderate to high real-world risk based on available signals. The attack vector is network-based and requires no privileges (unauthenticated access), making exploitation trivial and automatable at scale. CWE-862 (Missing Authorization) frequently results in data exfiltration and information disclosure in production environments. The Tenable disclosure and lack of KEV or POC status suggest this is a recently disclosed, non-exploited-in-the-wild vulnerability, but the simplicity of the attack (predictable URL enumeration) and the sensitivity of flow-associated image data elevates priority. Organizations running Langflow should treat this as a high-priority remediation candidate, particularly if flows contain proprietary visual content, training data, or embedded secrets. The vulnerability is automatable and introduces avoidable risk with straightforward patching.

An attacker discovers or obtains a Langflow deployment URL and begins enumerating the image endpoint with common or sequential flow IDs (e.g., 1, 2, 3, or known project names). For each flow ID, the attacker iterates through predictable file names (e.g., 'diagram.png', 'output_0.jpg', 'training_data.png') and receives unguarded access to download image assets. No authentication or session token is required, and the endpoint returns HTTP 200 for valid resources. The attacker can rapidly exfiltrate sensitive visual content, training data diagrams, or embedded configuration images without triggering authorization denials or audit alerts. This is particularly damaging in multi-tenant or SaaS deployments where flows and their associated images contain proprietary business logic or customer data.