Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers where an authenticated user with RCE access can invoke the internal CLI command langflow superuser to create a new administrative user. This results in full superuser access, even if the user initially registered through the UI as a regular (non-admin) account. A patched version has not been made public at this time.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation
    vulnerability exists in Langflow containers where an authenticated user with RCE access can invoke the
    internal CLI command langflow superuser to create a new administrative user. This results in full
    superuser access, even if the user initially registered through the UI as a regular (non-admin) account. A
    patched version has not been made public at this time. (CVE-2025-57760)

According to its banner, the version of Langflow running on the remote host is prior to 1.5.1. It is, therefore, affected by a Privilege Escalation vulnerability that allows an authenticated user with RCE access to create a new administrative user.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
436434	SCA: security update for langflow, langflow-base (GHSA-4gv9-mp8m-592r)	Tenable Cloud Security	SCA Checks	high
436434	SCA: security update for langflow, langflow-base (GHSA-4gv9-mp8m-592r)	Tenable Self-Hosted Container Security	SCA Checks	high
114949	Langflow < 1.5.1 Privilege Escalation	Web App Scanning	Artificial Intelligence	high

Detections

Analytics

CVE-2025-57760

high

Tenable Plugins

high

high

high