CISA orders federal agencies to patch a critical Langflow flaw exploited to steal AI-agent credentials

CISA added CVE-2026-55255 — an authorization-bypass (IDOR) flaw in Langflow, the drag-and-drop AI-agent-building tool — to its Known Exploited Vulnerabilities catalog on July 7, 2026, with a July 10 federal patch deadline. Attackers used it to harvest LLM provider keys, cloud credentials, and other secrets from other users' flows; the fix is Langflow 1.9.1+.

What it means If you're building or self-hosting agent workflows, this is the reminder that agent-orchestration tools carry the same credential-theft risk as any authenticated web app — patch and audit access; don't assume the AI layer is out of scope for basic access-control hygiene.