A critical authorization bypass vulnerability in Langflow allows unauthenticated attackers to access and download private user images, posing a significant risk to data confidentiality.

The /api/v1/files/images/{flow_id}/{file_name} endpoint fails to perform authentication or ownership checks on requested files. This allows any unauthenticated attacker to retrieve sensitive images by providing a valid flow ID and file name.

This vulnerability enables unauthorized access to potentially sensitive or proprietary data stored within Langflow workflows. Given the CVSS score of 7.5, the risk to confidentiality is high, particularly in multi-tenant environments where an attacker can systematically scrape data from other users. Successful exploitation could lead to significant data breaches and a loss of trust in the platform.

Immediate Action: Update the Langflow package to version 1.9.0 or later to implement the necessary authentication and authorization checks.

Proactive Monitoring: Review API access logs for anomalous patterns, specifically looking for high volumes of unauthorized requests to the image retrieval endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) to restrict access to the /api/v1/files/images/ path, ensuring only authorized traffic can reach the endpoint until the patch is applied.

Public Exploit Available: Unknown.

The vulnerability represents a direct threat to data privacy due to the lack of access controls on the image API. Organizations currently running versions 1.0.0 through 1.8.1 must prioritize upgrading to version 1.9.0 immediately. If an immediate upgrade is not feasible, administrators should restrict network access to the affected endpoint to prevent unauthorized data exfiltration.