v1.11.5

langflow-ai/langflowv1.11.5Aug 25, 2026by github-actions[bot]

AI Summary

A security-focused release that backports fixes from version 1.12, including PVR security updates, security hardening for MCP components, and a fix to ensure persisted flows are retained when the header list refreshes.

Key Highlights

  • Backported 1.12 PVR security fixes to 1.11.5
  • Fixed frontend to keep the persisted flow when the header list refreshes
  • Backported public MCP execution hardening and generated-code boundary hardening

New Features

  • Opt-in bypass for the multi-worker in-memory queue guard

Full Release Notes

<!-- Release notes generated using configuration in .github/release.yml at v1.11.5 -->

## What's Changed
### ✨ New Features
* feat(server): add an opt-in bypass for the multi-worker in-memory queue guard by @erichare in https://github.com/langflow-ai/langflow/pull/14658
### 🐛 Bug Fixes
* fix(ci): keep skipped package releases green and stop sending target_commitish (release-1.11.4) by @erichare in https://github.com/langflow-ai/langflow/pull/14648
* fix(security): backport the 1.12 PVR security fixes to 1.11.5 by @erichare in https://github.com/langflow-ai/langflow/pull/14654
* fix(frontend): keep the persisted flow when the header list refreshes by @erichare in https://github.com/langflow-ai/langflow/pull/14659
* fix(security): close model-provider SSRF follow-up gaps by @erichare in https://github.com/langflow-ai/langflow/pull/14705
* fix(security): backport public MCP execution hardening by @erichare in https://github.com/langflow-ai/langflow/pull/14711
* fix(security): backport generated-code boundary hardening by @erichare in https://github.com/langflow-ai/langflow/pull/14709
* fix(security): backport MCP stdio component policy by @erichare in https://github.com/langflow-ai/langflow/pull/14710
* fix(memory-base): handle tagged Ollama embedding models by @erichare in https://github.com/langflow-ai/langflow/pull/14740
### 📝 Documentation Updates
* docs(security): record Mend triage for four unremediable findings by @erichare in https://github.com/langflow-ai/langflow/pull/14617
### 🛠 Maintenance Tasks
* chore: 1.11.5 dep upgrade by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/14751
### ✅ Tests
* test(frontend): forward-port the grouped-node readiness stabilization to 1.11.5 by @erichare in https://github.com/langflow-ai/langflow/pull/14662


**Full Changelog**: https://github.com/langflow-ai/langflow/compare/v1.11.4...v1.11.5