{"id":"CVE-2025-57760","summary":"Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation","details":"Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers where an authenticated user with RCE access can invoke the internal CLI command langflow superuser to create a new administrative user. This results in full superuser access, even if the user initially registered through the UI as a regular (non-admin) account. A patched version has not been made public at this time.","aliases":["GHSA-4gv9-mp8m-592r","PYSEC-2025-243","PYSEC-2026-1526"],"modified":"2026-08-12T03:51:13.883380461Z","published":"2025-08-25T16:22:17.772Z","database_specific":{"cwe_ids":["CWE-269"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/57xxx/CVE-2025-57760.json","cna_assigner":"GitHub_M"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/57xxx/CVE-2025-57760.json"},{"type":"ADVISORY","url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4gv9-mp8m-592r"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-57760"},{"type":"FIX","url":"http://github.com/langflow-ai/langflow/pull/9152"},{"type":"FIX","url":"https://github.com/langflow-ai/langflow/commit/c188ec113c9ca46154ad01d0eded1754cc6bef97"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/langflow-ai/langflow","events":[{"introduced":"0"},{"fixed":"9ad92eaeaa935db67deca300c40ed0dffea39131"},{"introduced":"f4e78421e5af8d8efb7800e73146608bdb0aa7d0"},{"fixed":"c188ec113c9ca46154ad01d0eded1754cc6bef97"}],"database_specific":{"cpe":["cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev0:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev1:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev10:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev11:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev12:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev13:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev14:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev15:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev16:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev17:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev18:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev19:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev2:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev20:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev21:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev22:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev23:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev24:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev25:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev26:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev27:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev28:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev29:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev3:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev30:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev31:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev4:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev5:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev6:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev7:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev8:*:*:*:*:*:*","cpe:2.3:a:langflow:langflow:1.5.0:dev9:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"fixed":"1.5.0"},{"introduced":"1.5.0-dev0"},{"last_affected":"1.5.0-dev0"},{"introduced":"1.5.0-dev1"},{"last_affected":"1.5.0-dev1"},{"introduced":"1.5.0-dev10"},{"last_affected":"1.5.0-dev10"},{"introduced":"1.5.0-dev11"},{"last_affected":"1.5.0-dev11"},{"introduced":"1.5.0-dev12"},{"last_affected":"1.5.0-dev12"},{"introduced":"1.5.0-dev13"},{"last_affected":"1.5.0-dev13"},{"introduced":"1.5.0-dev14"},{"last_affected":"1.5.0-dev14"},{"introduced":"1.5.0-dev15"},{"last_affected":"1.5.0-dev15"},{"introduced":"1.5.0-dev16"},{"last_affected":"1.5.0-dev16"},{"introduced":"1.5.0-dev17"},{"last_affected":"1.5.0-dev17"},{"introduced":"1.5.0-dev18"},{"last_affected":"1.5.0-dev18"},{"introduced":"1.5.0-dev19"},{"last_affected":"1.5.0-dev19"},{"introduced":"1.5.0-dev2"},{"last_affected":"1.5.0-dev2"},{"introduced":"1.5.0-dev20"},{"last_affected":"1.5.0-dev20"},{"introduced":"1.5.0-dev21"},{"last_affected":"1.5.0-dev21"},{"introduced":"1.5.0-dev22"},{"last_affected":"1.5.0-dev22"},{"introduced":"1.5.0-dev23"},{"last_affected":"1.5.0-dev23"},{"introduced":"1.5.0-dev24"},{"last_affected":"1.5.0-dev24"},{"introduced":"1.5.0-dev25"},{"last_affected":"1.5.0-dev25"},{"introduced":"1.5.0-dev26"},{"last_affected":"1.5.0-dev26"},{"introduced":"1.5.0-dev27"},{"last_affected":"1.5.0-dev27"},{"introduced":"1.5.0-dev28"},{"last_affected":"1.5.0-dev28"},{"introduced":"1.5.0-dev29"},{"last_affected":"1.5.0-dev29"},{"introduced":"1.5.0-dev3"},{"last_affected":"1.5.0-dev3"},{"introduced":"1.5.0-dev30"},{"last_affected":"1.5.0-dev30"},{"introduced":"1.5.0-dev31"},{"last_affected":"1.5.0-dev31"},{"introduced":"1.5.0-dev4"},{"last_affected":"1.5.0-dev4"},{"introduced":"1.5.0-dev5"},{"last_affected":"1.5.0-dev5"},{"introduced":"1.5.0-dev6"},{"last_affected":"1.5.0-dev6"},{"introduced":"1.5.0-dev7"},{"last_affected":"1.5.0-dev7"},{"introduced":"1.5.0-dev8"},{"last_affected":"1.5.0-dev8"},{"introduced":"1.5.0-dev9"},{"last_affected":"1.5.0-dev9"}],"source":["CPE_RANGE","CPE_STRING","REFERENCES"]}}],"versions":["1.5.0-dev0","1.5.0-dev1","1.5.0-dev10","1.5.0-dev11","1.5.0-dev12","1.5.0-dev13","1.5.0-dev14","1.5.0-dev15","1.5.0-dev16","1.5.0-dev17","1.5.0-dev18","1.5.0-dev19","1.5.0-dev2","1.5.0-dev20","1.5.0-dev21","1.5.0-dev22","1.5.0-dev23","1.5.0-dev24","1.5.0-dev25","1.5.0-dev26","1.5.0-dev27","1.5.0-dev28","1.5.0-dev29","1.5.0-dev3","1.5.0-dev30","1.5.0-dev31","1.5.0-dev4","1.5.0-dev5","1.5.0-dev6","1.5.0-dev7","1.5.0-dev8","1.5.0-dev9","1.5.0.post1","1.4.2","1.4.1","1.4.0","1.3.4","1.3.3","1.3.2","1.3.1","1.3.0","1.2.0","1.1.4","1.1.3","1.1.2","v1.1.1","v1.1.0","v1.0.19","v1.0.18","v1.0.17","v1.0.16","v1.0.15","v1.0.13","v1.0.14","v1.0.12","v1.0.11","v1.0.10","v1.0.9","v1.0.8","v1.0.7","v1.0.6","v1.0.5","v1.0.4","v1.0.3","v1.0.2","v0.6.19","v0.6.18","v0.6.17","v0.6.16","v0.6.15","v0.6.14","v0.6.13","v0.6.12","v0.6.11","v0.6.10","v0.6.9","v0.6.8","v0.6.7","v0.6.6","v0.6.5","v0.6.4","v0.6.3","v0.6.3a6","v0.6.3a5","v0.6.3a4","v0.6.3a3","v0.6.3a2","v0.6.3a1","v0.6.3a0","v0.6.2","v0.6.1","v0.6.0","v0.6.0rc1","v0.5.12","v0.5.11","v0.5.10","v0.5.9","v0.5.8","v0.6.0a0","v0.5.7","v0.5.6","v0.5.5","v0.5.4","v0.5.3","v0.5.2","v0.5.1","v0.5.0","v0.5.0b6","v0.5.0b5","v0.5.0b4","v0.5.0b3","v0.5.0b2","v0.5.0b0","v0.5.0a6","v0.5.0a5","v0.5.0a4","v0.5.0a3","v0.5.0a2","v0.4.21","v0.5.0a1","v0.4.20","v0.4.19","v0.4.18","v0.5.0a0","v0.4.17","v0.4.16","v0.4.15","v0.4.14","v0.4.12","v0.4.11","v0.4.10","v0.4.9","v0.4.8","v0.4.7","v0.4.6","v0.4.5","v0.4.4","v0.4.3","v0.4.2","v0.4.1","v0.4.0","v0.3.4","v0.3.3","v0.3.2","v0.3.1","v0.3.0","v0.2.13","v0.2.12","v0.2.11","v0.2.10","v0.2.9","v0.2.8","v0.2.7","v0.2.6","v0.2.5","v0.2.4","v0.2.0","v0.2.3","v0.2.2","v0.2.1","v0.1.7","v0.1.6","v0.1.5","v0.1.4","v0.1.3","v0.1.2","v0.1.0","v0.0.89","v0.0.88","v0.0.87","v0.0.86","v0.0.85","v0.0.84","v0.0.83","v0.0.82","v0.0.81","v0.0.80","v0.0.79","v0.0.78","v0.0.77","v0.0.76","v0.0.75","v0.0.74","v0.0.73","v0.0.72","v0.0.71","v0.0.70","v0.0.69","v0.0.31"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-57760.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}