Langflow anfällig für Privilegienerweiterung über CLI Superuser Erstellung (Post-RCE)

The impact of this vulnerability is significant. An attacker who can achieve RCE within a Langflow container can easily escalate their privileges to gain full administrative control over the system. This allows them to modify configurations, access sensitive data, and potentially compromise the entire infrastructure. The ability to create a superuser effectively circumvents the intended security model of Langflow, allowing for unrestricted access. This is particularly concerning in environments where Langflow is used to manage critical workflows or sensitive data, as a successful exploit could lead to data breaches, system disruption, and unauthorized access.

Organizations deploying Langflow in production environments, particularly those utilizing Docker containers, are at risk. Shared hosting environments where multiple users share a single Langflow instance are especially vulnerable, as a compromised user could potentially escalate privileges and impact other users. Legacy configurations with weak access controls or inadequate container security measures also increase the risk.

• python / container:

ps aux | grep 'langflow superuser'

• python / container:

journalctl -u langflow -g 'superuser command'

• python / container:

find / -name 'langflow' -type d -exec grep -i 'superuser command' {} \;

1. 2025-08-25Disclosure

   disclosure

1. Reserviert2025-08-19
2. Veröffentlicht2025-08-25
3. Geändert2025-12-18
4. EPSS aktualisiert2026-03-23

The primary mitigation for CVE-2025-57760 is to upgrade Langflow to version 1.5.1 or later, which contains the fix for this vulnerability. If an immediate upgrade is not feasible, consider implementing stricter access controls within the Langflow container to limit the potential for RCE exploitation. This could involve restricting network access to the container, implementing strong authentication mechanisms, and regularly auditing user permissions. Monitoring container logs for suspicious activity, particularly the execution of the langflow superuser command, can also help detect and respond to potential attacks. After upgrading, confirm the fix by attempting to execute the langflow superuser command as a non-admin user; it should be denied.