Vulnerabilities
Report: CVE-2026-5025 - Langflow - Application Logs Exposed to All Authenticated Users - Analysis
CVE ID :CVE-2026-5025 Published : March 27, 2026, 3:17 p.m. | 29 minutes ago Description :The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer. These endpoints only require basic authentication ('get_current_active_user') without any privilege checks (e.g., 'is_superuser'). Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...