{
  "id": "CVE-2026-55255",
  "vendor_project": "Langflow",
  "product": "Langflow",
  "description": "Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.",
  "kev_date_added": "2026-07-07",
  "cvss": 9.0,
  "severity": "High",
  "advisories": [],
  "cited_in_cases": [],
  "indictment_cited": false
}