Breaches  › Tech  › Langflow Langflow
high · tech · Disclosed May 21, 2026

Langflow Langflow

Langflow Origin Validation Error Vulnerability — Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=Non

Original Disclosure
https://nvd.nist.gov/vuln/detail/CVE-2025-34291
Read original
Severity
high
Sector
tech
Disclosure date
May 21, 2026
Indexed
1 day, 18 hours ago