Langflow

v1.10.2 Security

This release includes 11 security fixes for security teams reviewing exposed deployments.

Published 19d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 11 known CVEs

Topics

agents chatgpt generative-ai large-language-models multiagent react-flow

Affected surfaces

auth rbac rce_ssrf

Summary

AI summary

Updates 🐛 Bug Fixes, fix, and ✨ New Features across a mixed release.

Full changelog

What's Changed

✨ New Features

feat: add global variable model overrides by @erichare in https://github.com/langflow-ai/langflow/pull/13935

🐛 Bug Fixes

fix: use session exec in telemetry writer by @erichare in https://github.com/langflow-ai/langflow/pull/13821
fix: disable mem0 telemetry by default by @erichare in https://github.com/langflow-ai/langflow/pull/13824
fix: handle invalid session auth tokens by @erichare in https://github.com/langflow-ai/langflow/pull/13823
fix: remove hardcoded default superuser password by @erichare in https://github.com/langflow-ai/langflow/pull/13822
fix: isolate FAISS persistence by user by @erichare in https://github.com/langflow-ai/langflow/pull/13871
fix: block public builds of code execution agents by @erichare in https://github.com/langflow-ai/langflow/pull/13875
fix: validate file paths by resolved cache containment by @erichare in https://github.com/langflow-ai/langflow/pull/13872
fix: restrict log retrieval to superusers by @erichare in https://github.com/langflow-ai/langflow/pull/13873
fix: block dangerous MCP stdio env vars by @erichare in https://github.com/langflow-ai/langflow/pull/13874
fix: Block Python interpreter format traversal by @erichare in https://github.com/langflow-ai/langflow/pull/13880
fix: constrain Directory component paths by @erichare in https://github.com/langflow-ai/langflow/pull/13878
fix(mcp): launch stdio servers with shell=False (no bash -c / cmd /c wrapper) by @erichare in https://github.com/langflow-ai/langflow/pull/13900
fix: gate litellm off Python 3.14 so pip install langflow resolves by @erichare in https://github.com/langflow-ai/langflow/pull/13814
fix: scope local vector store collections by user by @erichare in https://github.com/langflow-ai/langflow/pull/13882
fix: cascade span deletes when clearing traces for a flow by @andifilhohub in https://github.com/langflow-ai/langflow/pull/13960

✅ Tests

test(frontend): harden model dropdown footer clicks in select-gpt-model by @erichare in https://github.com/langflow-ai/langflow/pull/13936

Others

chore: upgrade lock files by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13971

Full Changelog: https://github.com/langflow-ai/langflow/compare/v1.10.1...v1.10.2

Security Fixes

Removed hardcoded default superuser password
Disabled mem0 telemetry by default
Isolated FAISS persistence per user
Blocked public builds of code execution agents
Validated file paths against resolved cache containment
Restricted log retrieval to superusers
Blocked dangerous MCP stdio environment variables
Prevented Python interpreter format traversal
Constrained Directory component paths
Launched stdio servers with shell=False (no bash -c / cmd /c wrapper)
Scoped local vector store collections by user

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Langflow

Get notified when new releases ship.

About Langflow

All releases →