CVE-2025-57760

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-57760

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-57760.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-57760

Aliases

Published

2025-08-25T16:22:17.772Z

Modified

2026-07-15T01:49:15.462148855Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation

Details

Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers where an authenticated user with RCE access can invoke the internal CLI command langflow superuser to create a new administrative user. This results in full superuser access, even if the user initially registered through the UI as a regular (non-admin) account. A patched version has not been made public at this time.

Database specific

{
    "cwe_ids": [
        "CWE-269"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/57xxx/CVE-2025-57760.json",
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/langflow-ai/langflow

Affected ranges

Type

GIT

Repo

https://github.com/langflow-ai/langflow

Events

Introduced

Fixed

9ad92eaeaa935db67deca300c40ed0dffea39131

Introduced

f4e78421e5af8d8efb7800e73146608bdb0aa7d0

Fixed

c188ec113c9ca46154ad01d0eded1754cc6bef97

Database specific

{
    "cpe": [
        "cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev0:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev1:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev10:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev11:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev12:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev13:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev14:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev15:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev16:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev17:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev18:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev19:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev2:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev20:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev21:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev22:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev23:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev24:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev25:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev26:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev27:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev28:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev29:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev3:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev30:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev31:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev4:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev5:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev6:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev7:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev8:*:*:*:*:*:*",
        "cpe:2.3:a:langflow:langflow:1.5.0:dev9:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.5.0"
        },
        {
            "introduced": "1.5.0-dev0"
        },
        {
            "last_affected": "1.5.0-dev0"
        },
        {
            "introduced": "1.5.0-dev1"
        },
        {
            "last_affected": "1.5.0-dev1"
        },
        {
            "introduced": "1.5.0-dev10"
        },
        {
            "last_affected": "1.5.0-dev10"
        },
        {
            "introduced": "1.5.0-dev11"
        },
        {
            "last_affected": "1.5.0-dev11"
        },
        {
            "introduced": "1.5.0-dev12"
        },
        {
            "last_affected": "1.5.0-dev12"
        },
        {
            "introduced": "1.5.0-dev13"
        },
        {
            "last_affected": "1.5.0-dev13"
        },
        {
            "introduced": "1.5.0-dev14"
        },
        {
            "last_affected": "1.5.0-dev14"
        },
        {
            "introduced": "1.5.0-dev15"
        },
        {
            "last_affected": "1.5.0-dev15"
        },
        {
            "introduced": "1.5.0-dev16"
        },
        {
            "last_affected": "1.5.0-dev16"
        },
        {
            "introduced": "1.5.0-dev17"
        },
        {
            "last_affected": "1.5.0-dev17"
        },
        {
            "introduced": "1.5.0-dev18"
        },
        {
            "last_affected": "1.5.0-dev18"
        },
        {
            "introduced": "1.5.0-dev19"
        },
        {
            "last_affected": "1.5.0-dev19"
        },
        {
            "introduced": "1.5.0-dev2"
        },
        {
            "last_affected": "1.5.0-dev2"
        },
        {
            "introduced": "1.5.0-dev20"
        },
        {
            "last_affected": "1.5.0-dev20"
        },
        {
            "introduced": "1.5.0-dev21"
        },
        {
            "last_affected": "1.5.0-dev21"
        },
        {
            "introduced": "1.5.0-dev22"
        },
        {
            "last_affected": "1.5.0-dev22"
        },
        {
            "introduced": "1.5.0-dev23"
        },
        {
            "last_affected": "1.5.0-dev23"
        },
        {
            "introduced": "1.5.0-dev24"
        },
        {
            "last_affected": "1.5.0-dev24"
        },
        {
            "introduced": "1.5.0-dev25"
        },
        {
            "last_affected": "1.5.0-dev25"
        },
        {
            "introduced": "1.5.0-dev26"
        },
        {
            "last_affected": "1.5.0-dev26"
        },
        {
            "introduced": "1.5.0-dev27"
        },
        {
            "last_affected": "1.5.0-dev27"
        },
        {
            "introduced": "1.5.0-dev28"
        },
        {
            "last_affected": "1.5.0-dev28"
        },
        {
            "introduced": "1.5.0-dev29"
        },
        {
            "last_affected": "1.5.0-dev29"
        },
        {
            "introduced": "1.5.0-dev3"
        },
        {
            "last_affected": "1.5.0-dev3"
        },
        {
            "introduced": "1.5.0-dev30"
        },
        {
            "last_affected": "1.5.0-dev30"
        },
        {
            "introduced": "1.5.0-dev31"
        },
        {
            "last_affected": "1.5.0-dev31"
        },
        {
            "introduced": "1.5.0-dev4"
        },
        {
            "last_affected": "1.5.0-dev4"
        },
        {
            "introduced": "1.5.0-dev5"
        },
        {
            "last_affected": "1.5.0-dev5"
        },
        {
            "introduced": "1.5.0-dev6"
        },
        {
            "last_affected": "1.5.0-dev6"
        },
        {
            "introduced": "1.5.0-dev7"
        },
        {
            "last_affected": "1.5.0-dev7"
        },
        {
            "introduced": "1.5.0-dev8"
        },
        {
            "last_affected": "1.5.0-dev8"
        },
        {
            "introduced": "1.5.0-dev9"
        },
        {
            "last_affected": "1.5.0-dev9"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

1.*

1.1.2

1.1.3

1.1.4

1.2.0

1.3.0

1.3.1

1.3.2

1.3.3

1.3.4

1.4.0

1.4.1

1.4.2

1.5.0-dev0

1.5.0-dev1

1.5.0-dev10

1.5.0-dev11

1.5.0-dev12

1.5.0-dev13

1.5.0-dev14

1.5.0-dev15

1.5.0-dev16

1.5.0-dev17

1.5.0-dev18

1.5.0-dev19

1.5.0-dev2

1.5.0-dev20

1.5.0-dev21

1.5.0-dev22

1.5.0-dev23

1.5.0-dev24

1.5.0-dev25

1.5.0-dev26

1.5.0-dev27

1.5.0-dev28

1.5.0-dev29

1.5.0-dev3

1.5.0-dev30

1.5.0-dev31

1.5.0-dev4

1.5.0-dev5

1.5.0-dev6

1.5.0-dev7

1.5.0-dev8

1.5.0-dev9

1.5.0.post1

v0.*

v0.0.31

v0.0.69

v0.0.70

v0.0.71

v0.0.72

v0.0.73

v0.0.74

v0.0.75

v0.0.76

v0.0.77

v0.0.78

v0.0.79

v0.0.80

v0.0.81

v0.0.82

v0.0.83

v0.0.84

v0.0.85

v0.0.86

v0.0.87

v0.0.88

v0.0.89

v0.1.0

v0.1.2

v0.1.3

v0.1.4

v0.1.5

v0.1.6

v0.1.7

v0.2.0

v0.2.1

v0.2.10

v0.2.11

v0.2.12

v0.2.13

v0.2.2

v0.2.3

v0.2.4

v0.2.5

v0.2.6

v0.2.7

v0.2.8

v0.2.9

v0.3.0

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.4.0

v0.4.1

v0.4.10

v0.4.11

v0.4.12

v0.4.14

v0.4.15

v0.4.16

v0.4.17

v0.4.18

v0.4.19

v0.4.2

v0.4.20

v0.4.21

v0.4.3

v0.4.4

v0.4.5

v0.4.6

v0.4.7

v0.4.8

v0.4.9

v0.5.0

v0.5.0a0

v0.5.0a1

v0.5.0a2

v0.5.0a3

v0.5.0a4

v0.5.0a5

v0.5.0a6

v0.5.0b0

v0.5.0b2

v0.5.0b3

v0.5.0b4

v0.5.0b5

v0.5.0b6

v0.5.1

v0.5.10

v0.5.11

v0.5.12

v0.5.2

v0.5.3

v0.5.4

v0.5.5

v0.5.6

v0.5.7

v0.5.8

v0.5.9

v0.6.0

v0.6.0a0

v0.6.0rc1

v0.6.1

v0.6.10

v0.6.11

v0.6.12

v0.6.13

v0.6.14

v0.6.15

v0.6.16

v0.6.17

v0.6.18

v0.6.19

v0.6.2

v0.6.3

v0.6.3a0

v0.6.3a1

v0.6.3a2

v0.6.3a3

v0.6.3a4

v0.6.3a5

v0.6.3a6

v0.6.4

v0.6.5

v0.6.6

v0.6.7

v0.6.8

v0.6.9

v1.*

v1.0.10

v1.0.11

v1.0.12

v1.0.13

v1.0.14

v1.0.15

v1.0.16

v1.0.17

v1.0.18

v1.0.19

v1.0.2

v1.0.3

v1.0.4

v1.0.5

v1.0.6

v1.0.7

v1.0.8

v1.0.9

v1.1.0

v1.1.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-57760.json"