Langflow weak Fernet key vulnerability leads to credential disclosure

1. 06:31
   GitHub 安全公告Selected

   Langflow's weak Fernet key derivation vulnerability allows offline decryption of all credentials; fixed in 1.10.1

   In Langflow 1.10.0 and earlier versions, the Python non-cryptographic PRNG is seeded with SECRET_KEY to derive the Fernet encryption key. An attacker who only needs to read the secret_key file can reconstruct the key offline and decrypt all credentials in the database without brute force. This issue is rated Critical, with a CVSS 3.1 score of 9.1, involving CWE-338, CWE-321, and CWE-311. Affected data includes user-stored API keys for LLM providers such as OpenAI and Anthropic, database connection strings and passwords, OAuth tokens, and webhook secrets, and all users of the same instance share the same SECRET_KEY. Fixed version 1.10.1 instead uses SHA-256 to derive a 32-byte key and uses MultiFernet for backward-compatible decryption of old ciphertext; deployments whose SECRET_KEY is shorter than 32 characters must re-enter previously stored credentials after upgrading.

Current attention 47·Peak in the comparable period 48 (Oct 7 12:00)·Change over the comparable past 24 hours 0%