Langflow is a tool for building and deploying AI-powered agents and workflows. In versions 1.0.0 through 1.8.1, the `/api/v1/files/images/{flow_id}/{file_name}`…

CVE-2026-33484 affects Langflow versions 1.0.0 through 1.8.1, an AI workflow building tool. The vulnerability allows unauthenticated access to user-uploaded images through the /api/v1/files/images endpoint without proper authentication or ownership verification. Attackers can exploit this in multi-tenant deployments by discovering or guessing flow_id values (UUIDs) that may be leaked through other API responses. Any attacker with knowledge of flow_id and file_name can download images with HTTP 200 response without credentials. This represents a significant data exposure risk in multi-tenant environments. The issue has been patched in version 1.9.0.