Critical · 1 source · latest 1h

IBM patches critical Langflow flaws enabling authentication bypass and code execution

CRITICAL · VULNERABILITYIBMredteam/daily · 1 source

Severity: Critical
Sources: 1

What happened

IBM has fixed serious security flaws in Langflow, a popular tool that helps businesses build AI assistants without needing to write code. Attackers could have used the flaws to get past login checks, steal access keys and run their own commands on the server.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

Upgrade Langflow OSS to version 1.13.0, available from PyPI or as a Docker image.
Back up the database, secret key and uploaded files before upgrading.
If the deployment uses automatic login, prepare the existing account for password sign-in as described in IBM's upgrade instructions.
Upgrade Hono to version 4.13.5.

Written by AI from the sources, checked against them

Read the full story at the source