8.7Yüksek
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
langflow-ai langflow; langflow-ai langflow-base
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.5.1, the `_read_flow` helper in `src/backend/base/langflow/api/v1/flows.py` branched on the `AUTO_LOGIN` setting to decide whether to filter by `user_id`. When `…