Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code IBM said last week Langflow is an opensource tool for building AI agents and workflows and its vulnerability reports go to IBM Every release from 100 through 1128 has the flaws and the only fix is version 1130 Neither flaw is in CISAs Known