Beveiligingsadvies

CVE-2026-33053

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-20 06:53:48

Laatst bijgewerkt 2026-03-20 18:07:41

Toegewezen door GitHub_M

CVSS-score 6.1

Status PUBLISHED

Beschrijving

Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the delete_api_key_route() endpoint accepts an api_key_id path parameter and deletes it with only a generic authentication check (get_current_active_user dependency). However, the delete_api_key() CRUD function does NOT verify that the API key belongs to the current user before deletion.

← Alle CVE's bekijken Bekijk op cve.org ↗