PYSEC-2026-79

Langflow is a tool for building and deploying AI-powered agents and workflows. Versions 1.2.0 through 1.8.1 have a bypass of the patch for CVE-2025-68478 External Control of File Name, leading to the root architectural issue within LocalStorageService remaining unresolved. Because the underlying...

CVE-2025-68478

creationtimestamp| type| source ---|---|--- 2025-12-19 14:44:56+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-f43r-cc68-gpx4 2026-01-02 18:48:41+00:00| published-proof-of-concept| Telegram/SIlHdnSWOhxtT164bo5OUY813qzBPWb650GYgkhFr1n0D8...