CVE-2026-33484: langflow Unauthenticated IDOR Vulnerability on Image Downloads
Summary
CVE-2026-33484: langflow has Unauthenticated IDOR on Image Downloads. Affects langflow versions >= 1.0.0, <= 1.8.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Langflow is an open-source framework designed for building and managing workflows in various applications. It provides users with the ability to upload, manage, and download files, including images, within a multi-tenant environment. However, the framework has a critical vulnerability that allows unauthorized access to image files, posing a significant risk to user data privacy.
Vulnerability Detail
The vulnerability exists in the '/api/v1/files/images/{flow_id}/{file_name}' endpoint, which serves image files without requiring authentication or ownership verification. This means that any unauthenticated user can make a request to this endpoint with a known flow_id and file_name, receiving the image file in response with an HTTP 200 status. The issue arises because the 'download_image' function does not implement any access control measures, unlike other file-related endpoints that enforce authentication and ownership checks. This flaw can lead to unauthorized data exposure, allowing attackers to download images uploaded by other users in a multi-tenant setup.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can implement an authentication layer in your application to restrict access to the '/api/v1/files/images/' endpoint. This can be done by adding authentication checks before allowing access to the image download functionality. For example, you can modify the endpoint to require a valid user session or token.
Conclusion
The langflow package has a critical vulnerability that allows unauthenticated access to image downloads, posing a significant risk to user data privacy. It is essential to update to the latest version to mitigate this risk and implement temporary workarounds if necessary.
See every vulnerability recorded for langflow →
FAQ
The vulnerability has a CVSS score of 7.5, indicating a high severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to unauthorized access to sensitive user data, specifically images uploaded by other users, resulting in data leaks and privacy violations.
Yes, a patch is available in version 1.8.2 of the langflow package. It is recommended to update to this version or later.
If immediate updating is not possible, implement authentication checks on the affected endpoint as a temporary workaround to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for langflow.
