Latest Langflow News & Updates

See the latest news and media coverage for Langflow. We track all announcements, press releases, and industry mentions in real time, all in one place.

Langflow

Visual platform for building AI agents and MCP servers

langflow.org

Headquarters: Uberlândia, Brazil
Founded year: 2020
Company type: Private company
Number of employees: 18–50
Industry: IT Services & Consulting

Last updated October 29

Latest news about Langflow

In short: Langflow faced repeated critical security vulnerabilities exploited in the wild while releasing new product versions.

Company announcements

September 8 Langflow

Langflow releases Langflow Desktop version 1.12 with new features

The update adds OpenTelemetry support for visibility and introduces lighter, modular installations via Langflow Extensions.

September 2 Langflow

Langflow releases version 1.12 with OpenTelemetry and bundle updates

The update completes an extension bundle transition that reduces default installation size and separates opt-in providers. Administrators can enable OTLP telemetry for service monitoring through simple environment configurations.

July 29 Langflow

Langflow 1.11 adds A2A protocol support

It enables flows to be published as callable agents and integrate with other A2A-compatible systems for interoperable multi-agent workflows.

July 23 Langflow

Langflow releases 1.11.0 with multi-vector retrieval via NextPlaid

It uses ColBERT-style late interaction and ColPali visual retrieval, no custom code needed

Media coverage

October 29 OrcaRouter

CVE-2026-9198: Langflow minted superuser tokens for anyone, then executed what they sent

IBM chains a superuser token leak with a code validator that runs Python in CVE-2026-9198. CISA logged exploitation on 4 August 2026; the fix is...

October 26 OrcaRouter

Langflow CVE-2026-0768 exploited to harvest AI keys

An unauthenticated root RCE in Langflow's code validator drew 360 honeypot detections in days, as attackers read OpenAI and AWS keys.

October 25 Helix

Langflow Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-55255) | Threat Watch

High · CVSS 8.4 (v3.1) · exploited in the wild (CISA KEV). Langflow contains an authorization bypass through user-controlled key vulnerability which allows an...

October 25 Helix

Langflow Code Injection Vulnerability (CVE-2026-33017) | Threat Watch

Critical · CVSS 9.8 (v3.1) · exploited in the wild (CISA KEV). Langflow contains a code injection vulnerability that could allow building public flows without...

Never miss news about Langflow

Track Langflow and your other target companies to get real-time alerts and weekly summaries delivered straight to your inbox.

Langflow competitors & trending companies

Browse news for competitors to Langflow and other trending companies.