Langflow webhook authentication bypass leads to unauthorized flow execution

1. 06:31
   GitHub 安全公告Selected

   Langflow fixed a webhook authentication bypass vulnerability that allowed unauthenticated users to execute arbitrary flows

   Langflow's webhook authentication logic has a vulnerability: an unauthenticated user who only knows the flow's UUID can trigger the execution of any flow as the owner. The root cause is that the WEBHOOK_AUTH_ENABLE configuration defaults to False when introduced in v1.7.0, causing AuthService.get_webhook_user to directly return the flow owner without validating the API key, leaving all webhook endpoints public by default. An attacker can use this to achieve remote code execution (RCE), denial of service (DoS), or tampering with external systems such as databases. Affected versions are >= 1.7.0, <= 1.9.0, fixed in v1.9.1 via PR #12845, which changed the default value of WEBHOOK_AUTH_ENABLE to True, unless operators explicitly set LANGFLOW_WEBHOOK_AUTH_ENABLE=false.

Current attention 55·Peak in the comparable period 56 (Oct 7 12:00)·Change over the comparable past 24 hours 0%