A vulnerability, which was classified as critical, was found in langflow-ai langflow up to 1.9.1. This issue affects some unknown processing of the file /api/v1/responses. Executing a manipulation can lead to authorization bypass.

This vulnerability is tracked as CVE-2026-55255. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.