Executive brief
Langflow Missing Authentication on Critical API Endpoints
Affected products
- PyPI langflow
- PyPI langflow-base
Junglewise Threat Intelligence
CVE-2026-21445: PYSEC-2026-2571 - Langflow Missing Authentication on Critical API Endpoints
CVE-2026-21445 · Severity: medium · CVSS 4 · Published 2026-07-13
Vendors: PyPI.
Related threats
- PYSEC-2026-1522 - Langflow vulnerable to Server-Side Request Forgery
- PYSEC-2026-1526 - Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
- PYSEC-2026-1523 - Langflow vulnerable to remote code execution
- PYSEC-2026-1521 - Inefficient Regular Expression Complexity in langflow
- PYSEC-2026-376 - Langflow has Remote Code Execution in CSV Agent