Executive brief
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Affected products
- PyPI langflow
- PyPI langflow-base
Junglewise Threat Intelligence
CVE-2025-57760: PYSEC-2026-1526 - Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
CVE-2025-57760 · Severity: low · CVSS 3.1 · Published 2026-07-07
Vendors: PyPI.
Related threats
- PYSEC-2026-2571 - Langflow Missing Authentication on Critical API Endpoints
- PYSEC-2026-1522 - Langflow vulnerable to Server-Side Request Forgery
- PYSEC-2026-1523 - Langflow vulnerable to remote code execution
- PYSEC-2026-1521 - Inefficient Regular Expression Complexity in langflow
- PYSEC-2026-376 - Langflow has Remote Code Execution in CSV Agent