ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.
Langflow < 1.3.0 unauthenticated RCE via /api/v1/validate/code
Langflow versions below 1.3.0 contained an unauthenticated remote code execution vulnerability in the /api/v1/validate/code endpoint. The vulnerability was fixed in version 1.3.0 released in March 2025.
AII-1001-881393 sources ↓
What happened
The /api/v1/validate/code endpoint in Langflow versions below 1.3.0 did not require authentication, allowing unauthenticated attackers to access the code validation endpoint.
Governance controls
The vulnerability was fixed in version 1.3.0 released on March 31, 2025 via a pull request that added user authentication to the /code endpoint.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.
horizon3.ai
https://www.horizon3.ai/attack-research/disclosures/unsafe-at-any-speed-abusing-python-exec-for-unauth-rce-in-langflow-ai/