{"id":"CVE-2025-57760","published":"2025-08-25T16:22:17Z","modified":"2025-08-25T20:34:14Z","title":"Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation","vendor":"langflow-ai","product":"langflow","tier":"tail","description":{"text":"Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers where an authenticated user with RCE access can invoke the internal CLI command langflow superuser to create a new administrative user. This results in full superuser access, even if the user initially registered through the UI as a regular (non-admin) account. A patched version has not been made public at this time.","provenance":"source","from":"CVE.org"},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00539,"percentile":0.45223,"provenance":"source"},"cwes":[{"id":"CWE-269","name":"Improper Privilege Management"}],"references":[{"url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4gv9-mp8m-592r","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/langflow-ai/langflow/commit/c188ec113c9ca46154ad01d0eded1754cc6bef97","tags":["x_refsource_MISC"]},{"url":"http://github.com/langflow-ai/langflow/pull/9152","tags":["x_refsource_MISC"]}],"priority":{"score":15.2,"factors":[{"name":"EPSS percentile","points":9.04},{"name":"CVSS severity","points":6.16}]},"vendorSlug":"langflow-ai","affectedVersions":[{"vendor":"langflow-ai","product":"langflow","versions":["<= 1.5.0"]}],"affected":[{"ecosystem":"PyPI","package":"langflow","vulnerableRanges":["<1.5.1","<1.5.0"],"patched":["1.5.1","1.5.0"],"from":["GHSA-4gv9-mp8m-592r","PYSEC-2025-243"],"provenance":"source"},{"ecosystem":"PyPI","package":"langflow-base","vulnerableRanges":["<0.5.1"],"patched":["0.5.1"],"from":["GHSA-4gv9-mp8m-592r","PYSEC-2026-1526"],"provenance":"source"}],"euvd":{"id":"EUVD-2025-25750","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2024-37014","published":"2024-06-10","fixed":"1.0.15","kev":false},{"cve":"CVE-2026-55446","published":"2026-06-23","fixed":"1.0.19","kev":false},{"cve":"CVE-2025-3248","published":"2025-04-07","fixed":"1.3.0","kev":true,"link":{"from":"CVE-2025-3248","to":"CVE-2025-57760","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:langflow","fromFixed":"1.3.0","toFixed":"1.5.1","daysApart":140}]}},{"cve":"CVE-2025-57760","published":"2025-08-25","fixed":"1.5.1","kev":false},{"cve":"CVE-2026-34046","published":"2026-03-27","fixed":"1.5.1","kev":false,"link":{"from":"CVE-2025-57760","to":"CVE-2026-34046","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:langflow","fromFixed":"1.5.0","toFixed":"1.5.1","daysApart":214}]}},{"cve":"CVE-2025-34291","published":"2025-12-05","fixed":"1.7.0","kev":true,"link":{"from":"CVE-2025-57760","to":"CVE-2025-34291","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:langflow","fromFixed":"1.5.1","toFixed":"1.7.0","daysApart":102}]}},{"cve":"CVE-2026-55423","published":"2026-06-23","fixed":"1.7.0","kev":false},{"cve":"CVE-2025-68478","published":"2025-12-19","fixed":"1.7.1","kev":false,"link":{"from":"CVE-2025-57760","to":"CVE-2025-68478","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:langflow","fromFixed":"1.5.1","toFixed":"1.7.0","daysApart":116}]}}],"package":"PyPI:langflow"}}