Langflow Missing Ownership Check Vulnerability Allows Unauthorized Flow Access and Modification

A vulnerability in Langflow versions prior to 1.5.1 allows authenticated users to access, modify, and delete flows belonging to other users. The issue arises from a missing ownership check in the '_read_flow' helper, located in 'src/backend/base/langflow/api/v1/flows.py'. The vulnerability was introduced by conditional logic intended to support public or example flows under auto-login mode, which inadvertently left the authenticated user path unprotected. As a result, any authenticated user could read another user's flow, including embedded plaintext API keys, alter the logic of AI agents, or delete flows from other users.

Impact

Exploitation of this vulnerability could lead to unauthorized access to, and modification or deletion of, user flows, including sensitive information such as API keys.

Remediation

Users can upgrade to Langflow version 1.5.1 or later to address this vulnerability.