Critical Langflow flaws could let unauthenticated attackers run code on servers

IBM said that two critical Langflow flaws could let a remote attacker with no account bypass authentication or execute arbitrary code. Releases 1.0.0 through 1.12.8 are affected, and the source identifies version 1.13.0 as the fix.