Langflow Missing Authorization Vulnerability in Log Router Endpoints

A vulnerability exists in the Langflow application within the log router's '/logs' and '/logs-stream' endpoints. These endpoints allow any authenticated user to access the complete application log buffer. The vulnerability arises because the endpoints only require basic authentication and lack proper privilege checks, such as verifying superuser status.

Impact

Exploitation of this vulnerability allows for unauthorized access to sensitive application log data, which could potentially contain confidential information or insights into the application's operation.