Tools AI Risk Radar ai-incident-0155
Incident record
Langflow fixes requests reaching private network services
- Severity
- Medium
- Status
- Patched
- Type
- Infra Vuln
- Target
- langflow, langflow-base, lfx, lfx-docling
- Actor
- researcher
What happened
An authenticated flow author could use several URL-taking components to make the server request private addresses or cloud metadata. The protection was disabled or only logged warnings, and several components omitted it.
langflow: affected < 1.10.3; fixed in 1.10.3. langflow-base: affected < 0.10.3; fixed in 0.10.3. lfx: affected < 1.10.3; fixed in 1.10.3. lfx-docling: affected < 0.1.2; fixed in 0.1.2. The date shown is the maintainer’s original disclosure date.
Sources
- Primary disclosuregithub.com/langflow-ai/langflow/security/advisories/GHSA-j8f…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026