CVE-2025-57760
HIGHDescription
Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers where an authenticated user with RCE access can invoke the internal CLI command langflow superuser to create a new administrative user. This results in full superuser access, even if the user initially registered through the UI as a regular (non-admin) account. A patched version has not been made public at this time.
Is your site exposed to CVE-2025-57760?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
| langflow | langflow |
References
Frequently Asked Questions
What is CVE-2025-57760? +
How severe is CVE-2025-57760? +
What products are affected by CVE-2025-57760? +
How do I check if I'm vulnerable to CVE-2025-57760? +
Related Vulnerabilities
A security vulnerability has been identified in Acer Care Center where the ACCSvc service creates a Named Pipe with a …
NitroSense 3.x before 3.01.3052 contains Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom …
PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a …
A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally authenticated user to perform actions …
A privilege escalation vulnerability in PocketBook InkPad Color 3 allows attackers to escalate to root privileges if they gain physical …
A Sudo privilege misconfiguration vulnerability in PocketBook InkPad Color 3 on Linux, ARM allows attackers to read file contents on …