UpHeron
All vulnerabilities

Servers and applications

CVE-2025-57760

Privilege Escalation via CLI Superuser Creation (Post-RCE)

Severity
High 8.8
Published
25 Aug 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.5.0, 1.5.1
Also known as
GHSA-4gv9-mp8m-592r
Sources
NVD, Project advisories (GitHub)

Description

Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers where an authenticated user with RCE access can invoke the internal CLI command langflow superuser to create a new administrative user. This results in full superuser access, even if the user initially registered through the UI as a regular (non-admin)…

Affected software

SoftwareAffected versions
LangflowServers and applications · cpe:a:langflow:langflow
  • Version 1.5.0-dev31
  • Version 1.5.0-dev30
  • Version 1.5.0-dev29
  • Version 1.5.0-dev28
All 33 release lines
  • Every version before 1.5.0
  • Version 1.5.0-dev0
  • Version 1.5.0-dev1
  • Version 1.5.0-dev2
  • Version 1.5.0-dev3
  • Version 1.5.0-dev4
  • Version 1.5.0-dev5
  • Version 1.5.0-dev6
  • Version 1.5.0-dev7
  • Version 1.5.0-dev8
  • Version 1.5.0-dev9
  • Version 1.5.0-dev10
  • Version 1.5.0-dev11
  • Version 1.5.0-dev12
  • Version 1.5.0-dev13
  • Version 1.5.0-dev14
  • Version 1.5.0-dev15
  • Version 1.5.0-dev16
  • Version 1.5.0-dev17
  • Version 1.5.0-dev18
  • Version 1.5.0-dev19
  • Version 1.5.0-dev20
  • Version 1.5.0-dev21
  • Version 1.5.0-dev22
  • Version 1.5.0-dev23
  • Version 1.5.0-dev24
  • Version 1.5.0-dev25
  • Version 1.5.0-dev26
  • Version 1.5.0-dev27
  • Version 1.5.0-dev28
  • Version 1.5.0-dev29
  • Version 1.5.0-dev30
  • Version 1.5.0-dev31
LangflowServers and applications · github:langflow-ai/langflow
  • Every version before 1.5.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-57760
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-57760
  • GitHub Advisory Database https://github.com/advisories/GHSA-4gv9-mp8m-592r
  • github.com https://github.com/langflow-ai/langflow/security/advisories/GHSA-4gv9-mp8m-592r