2025-10 · 2025-Q4
Langflow Account Takeover and RCE Chain
Layer tags: not yet tagged.
Target
Langflow (versions up to 1.6.9)
Impact
Complete instance compromise; all stored API keys exposed
Root Cause
Overly permissive CORS + missing CSRF protection + code validation endpoint