Which versions of Langflow are affected by CVE-2026-5022?

CVE-2026-5022 presents moderate security risk, a missing authorization vulnerability rated CVSS 6.3. Attackers could gain access beyond their authorized level.

How to fix or mitigate CVE-2026-5022?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Langflow CVE-2026-5022

Q: What is the CVSS score of CVE-2026-5022?

CVE-2026-5022 has a CVSS 4.0 base score of 6.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-16662 MEDIUM

Missing Authorization (CWE-862)

2026-03-27 tenable

GHSA-jvx2-jcjj-x36h

Authentication Bypass Langflow

6.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.3 MEDIUM

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 27, 2026 - 14:45 euvd

EUVD-2026-16662

Analysis Generated

Mar 27, 2026 - 14:45 vuln.today

CVE Published

Mar 27, 2026 - 14:34 nvd

MEDIUM 6.3

DescriptionCVE.org

The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowing any unauthenticated user to download images belonging to any flow by knowing (or guessing) the flow ID and file name.

AnalysisAI

Langflow's '/api/v1/files/images/{flow_id}/{file_name}' endpoint lacks authentication and authorization enforcement, permitting unauthenticated users to download arbitrary images associated with any flow by supplying or enumerating flow IDs and file names. This authentication bypass affects all versions of Langflow AI's langflow product and enables unauthorized disclosure of potentially sensitive image assets. No public exploit code or active exploitation has been confirmed at the time of analysis.

Technical ContextAI

The vulnerability resides in Langflow AI's file serving API endpoint (cpe:2.3:a:langflow-ai:langflow:*:*:*:*:*:*:*:*), which implements path-based resource retrieval without enforcing identity verification or permission checks. The root cause falls under CWE-862 (Missing Authorization), a common architectural flaw in RESTful API design where file download endpoints are exposed without middleware or handler-level authentication guards. An attacker can directly request resources by constructing URLs with known or guessed flow identifiers and file names, bypassing session validation and role-based access controls entirely. The attack surface is particularly broad because flow IDs and file names may follow predictable patterns or be discoverable through other means.

RemediationAI

Immediately review Tenable's advisory at https://www.tenable.com/security/research/tra-2026-23 for available patch guidance and apply any vendor-released updates to Langflow. As an interim mitigation, restrict network access to the '/api/v1/files/images/' endpoint via firewall or reverse proxy rules, permitting requests only from trusted internal networks or authenticated client IP ranges. Implement authentication middleware at the API gateway or application level to enforce session validation and RBAC checks before image downloads are served. Audit access logs for unauthorized enumeration attempts (multiple 200 or 404 responses to flow_id/{file_name} patterns) and consider rate-limiting image download endpoints to reduce the speed of automated harvesting. Until patching is complete, disable public exposure of Langflow instances or require VPN/SSH tunnel access.