Langflow Vulnerabilities Allow Code Execution and Security Bypass

CERT-Bund has released a critical security advisory (WID-SEC-2026-0747) detailing multiple vulnerabilities in Langflow, an open-source tool for building LLM-based applications. The vulnerabilities, affecting versions <=1.8.1 and <1.7.2, have a CVSS base score of 10.0 and allow attackers to bypass security measures or execute arbitrary code remotely. Mitigation measures are available.

Organizations using affected versions of Langflow should immediately update to a patched version or implement available mitigation strategies to prevent unauthorized code execution and security breaches. Failure to address these critical vulnerabilities could lead to significant security compromises, including data breaches and system takeover. The advisory highlights the urgent need for security patching and review of deployed LLM application development tools.