CVE-2026-21445 Langflow Missing Authentication on Critical API Endpoints
Unauthenticated attackers can access sensitive user data and perform destructive operations on Langflow API endpoints due to missing authentication controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-21445?
CVE-2026-21445 is a high-severity missing authorization vulnerability in Langflow Langflow, published on 2 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories, and perform destructive operations including message deletion. This affects endpoints handling personal data and system operations that should require proper authorization. Version 1.7.0.dev45 contains a patch.
Weakness: CWE-306
Which versions are affected by CVE-2026-21445?
6 open source packages ship an affected version, including langflow and langflow-base. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
langflow PyPI | All versions | 1.7.1 |
langflow PyPI | All versions | 1.7.1 |
langflow PyPI | All versions | 1.7.1 |
langflow-base PyPI | All versions | 0.7.1 |
langflow-base PyPI | All versions | 0.7.1 |
langflow-base PyPI | All versions | 0.7.1 |
Products include Langflow Langflow.
How do I fix CVE-2026-21445?
Upgrade langflow to 1.7.1 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-21445 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-21445 exists.
Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.
Other vulnerabilities in Langflow Langflow
Sources
Also known as GHSA-c5cp-vx83-jhqx, PYSEC-2026-1524, PYSEC-2026-2571.