v1.12.5
langflow-ai/langflowv1.12.5Oct 6, 2026by github-actions[bot]
Upgrading?
AI Summary
This release focuses on security enhancements and bug fixes, specifically addressing MCP server management, authentication policies, and dependency vulnerabilities. It also includes fixes for data manipulation logic and tool naming conflicts.
Key Highlights
- Security fixes restricting built-in code execution to administrators and confining chat attachments to authorized storage
- MCP server fixes including session leak prevention, credential redaction, and tool argument resolution
- Dependency upgrades to address security vulnerabilities
- Fixes for data manipulation (LFX) operations and tool disambiguation
Full Release Notes
<!-- Release notes generated using configuration in .github/release.yml at v1.12.5 --> ## What's Changed ### 🐛 Bug Fixes * fix(mcp): stop session leak and timeout retries by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/15460 * fix(mcp): bound server discovery concurrency and cleanup by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/15522 * fix(mcp): forward global variable headers from the environment by @erichare in https://github.com/langflow-ai/langflow/pull/15500 * fix(mcp): redact server credentials from management responses by @erichare in https://github.com/langflow-ai/langflow/pull/15529 * fix(a2a): enforce authenticated execution policy by @erichare in https://github.com/langflow-ai/langflow/pull/15530 * fix(security): restrict built-in code execution to administrators by @erichare in https://github.com/langflow-ai/langflow/pull/15531 * fix(security): confine stored chat attachments to authorized storage by @erichare in https://github.com/langflow-ai/langflow/pull/15532 * fix(deps): upgrade vulnerable dependencies for 1.12.5 by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/15505 * fix(lfx): stop Data addition from mutating the left operand's lists by @viktoravelino in https://github.com/langflow-ai/langflow/pull/15514 * fix(mcp): replace a pooled session whose server died by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/15469 * fix(memory): preserve cancelled ingestion status on release-1.12.5 by @erichare in https://github.com/langflow-ai/langflow/pull/15554 * fix(lfx): match numeric columns in the Filter equals operators by @MohammadHijjawi97 in https://github.com/langflow-ai/langflow/pull/15486 * fix(api): bound the session list returned by /monitor/messages/sessions by @AhsanAkhlaq in https://github.com/langflow-ai/langflow/pull/15466 * fix(lfx): skip the markdown delimiter row in Text to DataFrame by @MohammadHijjawi97 in https://github.com/langflow-ai/langflow/pull/15485 * fix(tools): disambiguate duplicate tool names by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/15556 * fix(mcp): resolve tool arguments from configured values by @erichare in https://github.com/langflow-ai/langflow/pull/15565 * fix: preserve source columns when merging tables by @LimbC-C in https://github.com/langflow-ai/langflow/pull/15543 * fix(playground): keep new chats out of older sessions now that the session list is capped by @viktoravelino in https://github.com/langflow-ai/langflow/pull/15581 ## New Contributors * @MohammadHijjawi97 made their first contribution in https://github.com/langflow-ai/langflow/pull/15486 * @LimbC-C made their first contribution in https://github.com/langflow-ai/langflow/pull/15543 **Full Changelog**: https://github.com/langflow-ai/langflow/compare/v1.12.4...v1.12.5
Related Repositories
public-apis/public-apis★ 491,126
A collective list of free APIs
NousResearch/hermes-agent★ 255,898
The agent that grows with you
yt-dlp/yt-dlp★ 199,993
A feature-rich command-line audio/video downloader
microsoft/markitdown★ 191,478
Python tool for converting files and office documents to Markdown.
Significant-Gravitas/AutoGPT★ 187,699
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.