v1.12.3 v1.12.4
langflow-ai/langflowSep 22, 2026 → Sep 29, 20267 days between releases
What's New
Migrates authentication from Passlib to bcrypt and hardens security against SSRF and pickle deserialization
Breaking Changes
- Authentication library migration from Passlib to bcrypt may require configuration updates
Improvements
- Hardened security against SSRF attacks and blocked pickle deserializers
- Improved database connector stability for Couchbase and TLS connections
- Enhanced frontend stability for model refresh and flow locking
Bug Fixes
- Fixed chat memory operations to be scoped correctly to flow and owner
- Resolved issues with public flow validation after group expansion
- Fixed recursion limit accounting for middleware graph nodes
- Corrected Split Video file read confinement
- Fixed tracing startup failures
Upgrade Notes
You must update your authentication configuration as Passlib has been replaced with bcrypt. Database connectors for Couchbase and TLS have been updated; verify your connection settings. No database migration is required.
The Two Releases
1.12.3
Sep 22, 2026· 29 days ago
This release introduces a new assistant slash command menu and a 100-step budget. It also includes a substantial number of security updates to address SSRF vulnerabilities, sandbox escapes, and credential leakage, alongside various bug fixes for MCP servers and knowledge base management.
Full release notes1.12.4
Sep 29, 2026· 22 days ago
A maintenance release focused on security hardening, authentication updates (Passlib to bcrypt), and database connector stability.
Full release notes