Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

T2Covered by 1 source · first reported by The Hacker News at 02 Nov, 11:50 UTC

Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week. Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports go to IBM. Every release from 1.0.0 through 1.12.8 has the…

devreleasessecurity

Sources

• T2Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on ServersThe Hacker News02 Nov, 11:50