CVE-2025-57760 Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation

What is CVE-2025-57760?

CVE-2025-57760 is a high-severity vulnerability in Langflow Langflow, published on 25 Aug 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers where an authenticated user with RCE access can invoke the internal CLI command langflow superuser to create a new administrative user. This results in full superuser access, even if the user initially registered through the UI as a regular (non-admin) account. A patched version has not been made public at this time.

Weakness: CWE-269

Which versions are affected by CVE-2025-57760?

6 open source packages ship an affected version, including langflow and langflow-base. It affects 1 product.

Products include Langflow Langflow.

How do I fix CVE-2025-57760?

Upgrade langflow to a fixed version for your release line: 1.5.0 or 1.5.1.

Is CVE-2025-57760 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-57760 exists.

Other vulnerabilities in Langflow Langflow

• CVE-2026-9198 IBM Langflow Code Injection Exploited Critical 9.8
• CVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Exploited Critical 9.8
• CVE-2025-3248 Langflow Missing Authentication Exploited Critical 9.8
• CVE-2025-34291 Langflow Origin Validation Error Exploited Critical 9.4
• CVE-2026-33017 Langflow Code Injection Exploited Critical 9.3

All Langflow Langflow vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4gv9-mp8m-592r, PYSEC-2025-243, PYSEC-2026-1526.