CVE-2026-55423

PoC ×2—

CVSS 3.1

6.1 medium

EPSS

<1%p13

Published

Jun 23, 2026 (Jun 23, 2026)

Modified

Jun 24, 2026

Description

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not clear the session. The previous user stays logged in unless another user explicitly logs in. This vulnerability is fixed in 1.7.0.

Vendors: langflow
Products: langflow
Weakness: CWE-613
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.