CVE-2024-7297

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.0.13

Description The issue allows a remote and low privileged attacker to gain super admin privileges by performing a mass assignment request on the "/api/v1/users" endpoint.

Recommendations For Langflow versions prior to 1.0.13, update to version 1.0.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/api/v1/users" endpoint to minimize the risk of exploitation.