CVE-2025-68477: Langflow API Component Vulnerable to Server-Side Request Forgery
Summary
CVE-2025-68477: Langflow vulnerable to Server-Side Request Forgery. Affects langflow versions < 1.7.1. Fixed in 1.7.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Langflow is an open-source framework that allows users to create and manage workflows involving various components, including an API Request component. This component enables users to issue arbitrary HTTP requests as part of their workflows. However, it lacks adequate security measures to prevent unauthorized access to internal resources, making it susceptible to Server-Side Request Forgery (SSRF) attacks.
Vulnerability Detail
The vulnerability arises from the API Request component's handling of user-supplied URLs. It performs minimal validation, allowing attackers to craft requests to internal services by controlling the URL input. This can lead to unauthorized access to sensitive internal resources, including administrative endpoints and metadata services, resulting in potential data exfiltration and further exploitation. The vulnerability is classified under CWE-918, indicating a failure to restrict access to internal resources.
How To Fix
Latest published version: 1.14.0.dev2 as of 22 Oct 2026
pip install --upgrade "langflow==1.14.0.dev2"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.7.1
This is the first release that contains the fix.
pip install --upgrade "langflow==1.7.1"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can implement network-level restrictions to block access to private IP ranges and cloud metadata endpoints from the Langflow server. Additionally, consider sanitizing user inputs to prevent malicious URLs from being processed.
Conclusion
The CVE-2025-68477 vulnerability in Langflow exposes users to significant risks due to inadequate validation of user-supplied URLs in the API Request component. It is crucial to update to the patched version to secure your application against potential SSRF attacks.
See every vulnerability recorded for langflow →
FAQ
SSRF is a security vulnerability that allows an attacker to send crafted requests from a vulnerable server to internal or external resources, potentially leading to unauthorized access to sensitive data.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit the Vulert playground at Vulert Scanner to check if your application is affected without requiring signup.
The impacts include unauthorized access to internal services, data exfiltration, and the potential for further attacks on internal systems.
Yes, a patch is available in version 1.7.1 of the Langflow package. It is recommended to update to this version to mitigate the vulnerability.
If immediate updating is not possible, implement network-level restrictions to block access to sensitive internal resources and sanitize user inputs to prevent malicious requests.
References
Related vulnerabilities
Recent vulnerabilities recorded for langflow.
