Langflow restricts unsandboxed Python in its REPL component

What happened

An authenticated flow author could run Python through the REPL component with the Langflow process’s permissions. The maintainer describes server-side code execution and possible privilege escalation.

langflow: affected < 1.10.1; fixed in 1.10.1. The date shown is the maintainer’s original disclosure date. Its advisory assigns 9.9 under CVSS 3.1. The maintainer’s 8 October update recommends version 1.12.3 or later for the complete hardening series; 1.10.1 remains the original core fix.