Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

Two critical flaws in Langflow, an open-source tool for building AI agents and workflows, could let a remote attacker with no account bypass authentication or run arbitrary code, IBM has said. Every release from 1.0.0 through 1.12.8 is affected, and the only fix is version 1.13.0.