Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

Summary

IBM disclosed two critical Langflow flaws that let a remote attacker with no account bypass authentication or run arbitrary code. Every release from 1.0.0 through 1.12.8 is affected, and neither flaw is listed in CISA's Known Exploited Vulnerabilities catalog as of its October 30 update.

Mitigation

Fixed in 1.13.0. Upgrade with pip install --upgrade "langflow==1.13.0" or move to the langflowai/langflow:1.13.0 Docker image, after backing up the database, secret key and uploaded files. Langflow 1.13 turns automatic login off by default. IBM offers no workaround for servers that cannot upgrade yet.

Related items

• MediumGHSA-j656-3hf2-fvjc: DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validationSimilar attack · GitHub Advisory Database
• LowChainalysis Discloses Data Breach Following AI-Driven CyberattackSimilar attack · SecurityWeek
• CriticalPrefab UI is vulnerable to Remote Code Execution via a Pyodide js Bridge to DenoSimilar attack · JFrog Security Research (Vulnerabilities)
• CriticalBeta9 is vulnerable to Host Filesystem Exposure via Volume Path TraversalSimilar attack · JFrog Security Research (Vulnerabilities)
• CriticalBeta9 is vulnerable to a Container Escape via Unvalidated Sandbox File PathsSimilar attack · JFrog Security Research (Vulnerabilities)