langflow-api-exposure: Langflow - Unauthenticated API Exposure

id: langflow-api-exposure

info:
  name: Langflow - Unauthenticated API Exposure
  author: comradezephyr
  severity: high
  description: |
    Langflow instance is exposed without authentication, allowing unauthorized access to custom LLM flows and component node structures.
  reference:
    - https://github.com/langflow-ai/langflow
    - https://docs.langflow.org/
  metadata:
    verified: true
    max-request: 1
    vendor: langflow-ai
    product: langflow
    shodan-query: title:"Langflow"
  tags: langflow,exposure,unauth,mlops,ai,llm

http:
  - raw:
      - |
        GET /api/v1/flows/ HTTP/1.1
        Host: {{Hostname}}

    matchers:
      - type: dsl
        dsl:
          - 'contains(body, "\"is_component\"") && contains(body, "\"data\"")'
          - 'status_code == 200'
        condition: and

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - '"name"\s*:\s*"([^"]+)"'
# digest: 490a0046304402205788399388e987d2ec18b508f778d63059ca38eb4d831dde2e472b6fa5d115fd0220377af206a407bf9d248d07df712ac2d0538e3edb746520066c42c8d80dde9e7e:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.