GHSA-7grx-3xcx-2xv5

Suggest an improvement
Source
https://github.com/advisories/GHSA-7grx-3xcx-2xv5
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-7grx-3xcx-2xv5/GHSA-7grx-3xcx-2xv5.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-7grx-3xcx-2xv5
Aliases
  • CVE-2026-33484
Published
2026-03-20T20:47:10Z
Modified
2026-03-20T21:03:56.122392Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
langflow has Unauthenticated IDOR on Image Downloads
Details

Summary

The /api/v1/files/images/{flow_id}/{file_name} endpoint serves image files without any authentication or ownership check. Any unauthenticated request with a known flowid and filename returns the image with HTTP 200.

Details

src/backend/base/langflow/api/v1/files.py:138-164 — download_image takes flow_id: UUID as a bare path parameter with no Depends(get_flow) or CurrentActiveUser. All other file routes (download_file, upload_file, list_files, delete_file) use Depends(get_flow) which enforces both authentication and ownership. There is no global auth middleware on /api/v1; protection is per-endpoint only.

PoC

curl -v "http://localhost:7860/api/v1/files/images/<flow_uuid>/<filename.png>"
# Returns HTTP 200 with image bytes, no auth header required

Impact

Unauthenticated cross-tenant data leak. In a multi-tenant deployment, any attacker who can discover or guess a flow_id (UUIDs can be leaked through other API responses) can download any user's uploaded images without credentials.

Database specific 
{
    "github_reviewed_at": "2026-03-20T20:47:10Z",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-284",
        "CWE-639",
        "CWE-862"
    ],
    "nvd_published_at": null,
    "severity": "HIGH"
}
References

Affected packages

PyPI / langflow

Package

Name
langflow
View open source insights on deps.dev
Purl
pkg:pypi/langflow

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Last affected
1.8.1

Affected versions

1.*
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.19.post1
1.0.19.post2
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.4.post1
1.2.0
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.4.0
1.4.1
1.4.2
1.4.3
1.5.0
1.5.0.post1
1.5.0.post2
1.5.1
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
1.6.8
1.6.9
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.0rc3
1.8.0rc4
1.8.0rc5
1.8.0rc6
1.8.0
1.8.1

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-7grx-3xcx-2xv5/GHSA-7grx-3xcx-2xv5.json"