Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

langflow-ai/langflow

              main @ 4da60c4
            

257

Fixes

CVEs

CRITICAL

Peak severity

27.8%

Coverage

Highlights

Auth Bypass: 84 prior fixes. Scrutinize any change in this area.

src/backend/base/langflow/services/auth/utils.py: most-fixed (10 issues). Treat as high-risk during review.

164 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: Unauthenticated remote code execution on the public flow build endpoint allowed arbitrary code evaluation via custom components prior to compiling or executing the graph on public unauthenticated builds. Strict substitution of server-trusted code keys and input sanitization are required.

Remote Code Execution: Insecure deserialization of telemetry writer payloads using the diskcache library permitted remote code execution. Standard sqlite3 storage with JSON serialization was implemented to prevent execution of signed or tampered pickle payloads.

Sandbox Escape: The custom Python code scanner was vulnerable to sandbox escapes using dotted submodules, import wildcards, and alias overrides, leading to raw TCP connections, system calls, and file descriptors leakage. Strict AST parsing restrictions are applied.