CVE-2024-7297
HIGH 8.8EPSS 21.3%
Langflow versions prior to 1.0.13 suffer from a Privilege Escalation vulnerability, allowing a remote and low privileged attacker to gain super admin privileges by performing a mass assignment request on the '/api/v1/users' endpoint.
- CVSS v3.1
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 21.35% chance of exploitation in the next 30 days, 97th percentile
- Published
- 2024-07-30
- Updated
- 2026-03-27