[CVE-2026-55255]

August 12, 2026

• A pre-auth IDOR in Langflow (CVE-2026-55255) is being exploited in the wild to hijack workflows and steal credentials via prompt injection, fixed in Langflow 1.9.1 (SecureLayer7). · AI, Agents & Offensive Security

in When the AI Is the One Finding the Zero-Days