May 5, 2025
1 new incident, 0 with updates.
Started
- ClosedPatched
Langflow: Missing Authentication Vulnerability
Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests. Added to CISA KEV on 2025-05-05.
LangflowClosed May 5, 2025