Langflow CISA KEV Addition - Confirmed Active Exploitation

Langflow (before v1.3.0)

Full server takeover; CISA confirmed active exploitation in the wild

Code validation endpoint invokes exec() on user-supplied code without auth or sandboxing