← CVE Intelligence

CVE-2024-7297

Langflow Privilege Escalation PUBLISHED

Description (CNA)

Langflow versions prior to 1.0.13 suffer from a Privilege Escalation vulnerability, allowing a remote and low privileged attacker to gain super admin privileges by performing a mass assignment request on the '/api/v1/users' endpoint.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 before 1.0.13

CWE

CWE-913

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.