PyPI/langflow CVE-2025-68478: high 7.1, EPSS 5.79%
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's `fs_path`, the server serializes the Flow
Action: Upgrade langflow to 1.7.0 or later.
pip install langflow==1.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.0 | - |
Fixed versions
| 1.7.0 |
Sources
CVE-2025-68478 · published · modified · JSON