CVE-2025-57760: Langflow Privilege Escalation via CLI Superuser Creation
Summary
CVE-2025-57760: Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE). Affects langflow versions < 1.5.0. No fix is published. How to fix ↓
Also tracked for
- langflow-base · PyPI
The same CVE-2025-57760 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Langflow is an open-source application designed for managing and orchestrating workflows in a user-friendly manner. It allows users to create, modify, and execute workflows seamlessly. The application includes a Docker image that provides a command-line interface (CLI) for advanced users. However, it has been found to have a critical vulnerability that allows unauthorized privilege escalation.
Vulnerability Detail
This vulnerability, discovered by Check Point researchers, allows an authenticated user with remote code execution (RCE) access to exploit the internal CLI command 'langflow superuser' to create a new administrative user. This occurs without proper checks to see if a superuser already exists, enabling a low-privileged user to gain full superuser access. The vulnerability bypasses role enforcement and compromises user integrity, leading to a complete takeover of the Langflow application. The implications include unauthorized access to all user data, flows, stored credentials, and configuration, as well as potential resource exhaustion and service degradation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can disable the CLI command by removing or restricting access to the '/app/.venv/bin/langflow' binary within the Docker container until the package is updated.
Conclusion
The CVE-2025-57760 vulnerability in Langflow poses a significant risk due to its potential for privilege escalation. Users are strongly advised to update their packages to the latest versions to protect against unauthorized access and data compromise.
See every vulnerability recorded for langflow →
FAQ
CVE-2025-57760 is a vulnerability in the Langflow application that allows authenticated users to escalate their privileges to superuser level via a CLI command.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The consequences include unauthorized access to sensitive data, the ability to manipulate user accounts, and potential resource exhaustion of the application.
The CVSS score of this vulnerability is 8.8, indicating a high severity level that requires immediate attention.
Yes, users should update to the latest versions of langflow and langflow-base to mitigate this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for langflow.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
