Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

Two critical vulnerabilities have been discovered in Langflow, an open-source tool used for building AI agents and workflows. The flaws could allow a remote, unauthenticated attacker to bypass authentication or execute arbitrary code on affected servers. All Langflow releases from version 1.0.0 through 1.12.8 are affected. IBM, which handles vulnerability reports for Langflow, disclosed the issues. The only remediation available is upgrading to version 1.13.0. The vulnerabilities have not yet been listed in CISA's Known Exploited Vulnerabilities catalog. The severity of these flaws is significant given that they require no authentication to exploit remotely.