A vulnerability labeled as problematic has been found in Langflow. Affected is an unknown function of the component v2 API. Such manipulation leads to privilege escalation.
This vulnerability is documented as CVE-2026-33309. The attack requires being on the local network. There is not any exploit available.
