Session Management Flaw in Langflow AI Tool

CVE-2026-55423

What is CVE-2026-55423?

Langflow, a tool designed for creating and deploying AI-driven agents and workflows, contains a session management issue prior to version 1.7.0. The logout button was not functioning correctly, allowing users to remain logged in, which posed a risk of unauthorized access when multiple users shared the same system. This security flaw emphasizes the importance of properly handling user sessions, particularly in environments where multiple users may need to access the application. The vulnerability has been addressed in version 1.7.0, where the logout functionality has been corrected to ensure sessions are cleared appropriately.

References