IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control.

Summary

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control.

Remediation

1. Inventory every Langflow Langflow deployment, including staging.
2. Upgrade Langflow Langflow to 1.12.4.
3. Confirm the running version after the upgrade.

References

• Patchhttps://www.ibm.com/support/pages/node/7293015