CVE-2026-6598 langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in file
Attackers can read sensitive authentication settings stored in cleartext on disk due to improper encryption in the project creation endpoint.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-6598?
CVE-2026-6598 is a medium-severity vulnerability in langflow-ai langflow, published on 20 Apr 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A security vulnerability has been detected in langflow-ai langflow up to 1.8.3. The affected element is the function create_project/encrypt_auth_settings of the file src/backend/base/Langflow/api/v1/projects.py of the component Project Creation Endpoint. Such manipulation of the argument auth_settings leads to cleartext storage in a file or on disk. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Which versions are affected by CVE-2026-6598?
3 open source packages ship an affected version, including langflow.
| Package | Affected | Fixed in |
|---|---|---|
langflow PyPI | All versions | 1.9.1 |
langflow PyPI | All versions | 1.9.1 |
langflow PyPI | All versions | 1.9.1 |
How do I fix CVE-2026-6598?
Upgrade langflow to 1.9.1 or later.
Is CVE-2026-6598 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-6598 exists.
Sources
Also known as GHSA-9jpj-cph8-w449, PYSEC-2026-2568.