Threat Intelligence / CVE / CVE-2026-55423
CVE-2026-55423
As of 2026-06-23, CVE-2026-55423 is a CVSS 6.1 (MEDIUM-severity) vulnerability. EPSS exploitation probability 0.2%. Threadlinqs Intelligence tracks 0 threats exploiting it.
Last updated: 2026-06-23
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not clear the session. The previous user stays logged in unless another user explicitly logs in. This vulnerability is fixed in 1.7.0.
CVSS v3 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses (CWE)
CWE-613
References
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-7hw8-6q6r-4276
- https://github.com/langflow-ai/langflow/pull/10527
- https://github.com/langflow-ai/langflow/pull/10528
Full detection coverage & IOCs for threats exploiting CVE-2026-55423 are available via the Threadlinqs MCP server (Purple tier). View plans →
← all vulnerabilities · Markdown version · Threadlinqs Intelligence
Enriched from CVE.org, NVD (this product uses the NVD API but is not endorsed or certified by the NVD), FIRST EPSS, CISA KEV, and GitHub Security Advisories.