Critical Langflow flaws allow unauthenticated attackers to run code on servers
CRITICAL · VULNERABILITYIBMredteam/daily · 1 source
- Severity
- Critical
- Sources
- 1
What happened
Two serious flaws in Langflow, a tool for building AI agents, could let an attacker with no account get past login and run their own code on a server. IBM reported the flaws. The only fix is to move to a newer version of the software.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Upgrade Langflow to version 1.13.0, the only release that fixes these flaws.
- Check whether any Langflow instance in your environment runs a version from 1.0.0 through 1.12.8.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News
Who and what is in it
Companies