v1.12.7

langflow-ai/langflowv1.12.7Oct 21, 2026by github-actions[bot]

Upgrading?

Full Release Notes

<!-- Release notes generated using configuration in .github/release.yml at v1.12.7 -->

## What's Changed
### 🐛 Bug Fixes
* fix(security): validate OpenSearch connector URLs by @erichare in https://github.com/langflow-ai/langflow/pull/15756
* fix(security): scope original-file S3 uploads by @erichare in https://github.com/langflow-ai/langflow/pull/15757
* fix(deps): dependency upgrades for 1.12.7 by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/15762
* fix(security): reject process and code loader capabilities by @erichare in https://github.com/langflow-ai/langflow/pull/15758
* fix(api): reconstruct workflow status without component instantiation by @erichare in https://github.com/langflow-ai/langflow/pull/15781
* fix(kb): honor environment fallback and redact connection errors by @erichare in https://github.com/langflow-ai/langflow/pull/15783
* fix(security): preserve jq conditional expressions during validation by @erichare in https://github.com/langflow-ai/langflow/pull/15782
* fix(security): block runtime object recovery in generated components by @erichare in https://github.com/langflow-ai/langflow/pull/15873
* fix(security): enforce admin policy on public component builds by @erichare in https://github.com/langflow-ai/langflow/pull/15874
* fix(security): reject runtime loader and environment capabilities by @erichare in https://github.com/langflow-ai/langflow/pull/15879
* fix: backport runtime URL prefixes and cookie isolation to 1.12.7 by @erichare in https://github.com/langflow-ai/langflow/pull/15880
* fix(security): enforce model policy in standalone builders by @erichare in https://github.com/langflow-ai/langflow/pull/15877
* fix(security): restrict non-owner graph overrides and local cleanup by @erichare in https://github.com/langflow-ai/langflow/pull/15878
* fix(security): separate saved flows from public history identifiers by @erichare in https://github.com/langflow-ai/langflow/pull/15876
* fix(deps): keep core package versions aligned on 1.12.7 by @erichare in https://github.com/langflow-ai/langflow/pull/15900
### ✅ Tests
* test(files): verify unsafe renames preserve safe downloads by @erichare in https://github.com/langflow-ai/langflow/pull/15759


**Full Changelog**: https://github.com/langflow-ai/langflow/compare/v1.12.6...v1.12.7

Related Repositories