Medium severity6.5NVD Advisory· Published Mar 27, 2026· Updated Apr 20, 2026
CVE-2026-5025
CVE-2026-5025
Description
The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer. These endpoints only require basic authentication ('get_current_active_user') without any privilege checks (e.g., 'is_superuser').
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- cpe:2.3:a:langflow:langflow:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.tenable.com/security/research/tra-2026-23nvdVendor Advisory
News mentions
0No linked articles in our index yet.