A vulnerability in Langflow allows anyone to download image files from a tenant without providing authentication. This flaw—an IDOR issue (CWE-639) compounded by missing authentication (and ownership checks (CWE-862)—allows the /api/v1/files/images/{flow_id}/{file_name} endpoint to serve requested images without verifying the requestor’s identity or whether the image belongs to the attendee. This enables attackers to collect visual data that may contain sensitive content, violating confidentiality and potentially enabling further reconnaissance.

The flaw affects all Langflow releases from 1.0.0 up to 1.8.1, which are provided by langflow‑ai. The 1.9.0 release includes a patch that enforces authentication checks on the image download route.

The CVSS score of 7.5 signals a high severity vulnerability. The EPSS score of 6% indicates a higher probability of exploitation, and the issue is not included in the CISA KEV catalog. Exploitation requires only an unauthenticated HTTP GET request once the attacker knows or can guess the flow_id and file_name, which are often exposed through other API outcomes. The low barrier to attack and the potential to expose all tenants’ uploaded images make this flaw a significant risk in a multi‑tenant deployment.