langflow Releases

Langflow 1.13.0 is a large platform release that introduces a full integrations and connections layer (persistent connections, delegated OAuth brokering, per-principal resolution, and policy governance), a new triggers subsystem with a leased dispatcher, webhook ingress, and Slack/Microsoft/Google event sources, plus enterprise administration, audit logging, and GDPR tooling. It also adds substantial operational capabilities for self-hosted deployments, including SQLite-to-Postgres conversion, knowledge base and file relocation, migration preflight/integrity checks, and a guided migration UI. Alongside this, the release ships new bundles and components (FunASR, Plivo, Serply, Serping, Figranium), Korean localization, multi-user editing safety, and background job metrics.

Oct 22, 2026

Langflow v1.12.8 is a patch release focused on bug fixes. It improves flow execution reliability by normalizing exported flow code before execution and fixes credential handling for public MCP flows. No new features or breaking changes are included.

Oct 22, 2026

Langflow 1.12.7 is a security-hardening patch release that closes a broad set of vulnerabilities across connectors, file handling, code/process loaders, and component execution paths. Alongside the security work, it includes dependency upgrades, improved workflow status reconstruction, and backports for runtime URL prefixes and cookie isolation. No new user-facing features are introduced; the focus is on tightening policies and preventing unsafe capability exposure.

Oct 21, 2026

This release focuses on stability and security, introducing backports from version 1.13.0 and resolving various bugs related to MCP schemas, data type conversion, and LFX operations.

Oct 13, 2026

This release focuses on security enhancements and bug fixes, specifically addressing MCP server management, authentication policies, and dependency vulnerabilities. It also includes fixes for data manipulation logic and tool naming conflicts.

Oct 6, 2026

A maintenance release focused on security hardening, authentication updates (Passlib to bcrypt), and database connector stability.

Sep 29, 2026

This release introduces a new assistant slash command menu and a 100-step budget. It also includes a substantial number of security updates to address SSRF vulnerabilities, sandbox escapes, and credential leakage, alongside various bug fixes for MCP servers and knowledge base management.

Sep 22, 2026

This release upgrades the Guardrails component with optional combined rule and model checks. It addresses numerous bug fixes related to database constraints, authentication sessions, and streaming errors. Maintenance tasks include dependency upgrades, security patches, and migration of LangChain Community integrations.

Sep 16, 2026

This release focuses on bug fixes for frontend rendering, Watsonx model detection behind proxies, and improvements to MCP server connectivity and memory management.

Sep 8, 2026

This release focuses on enterprise readiness, introducing a complete RBAC authorization foundation, enhanced observability via OTLP, and security hardening including an opt-in exec-sandbox. It also refactors the distribution model to use a shared bundle-free core and improves accessibility across the application.

Sep 1, 2026

This release focuses on bug fixes for the Model Context Protocol (MCP), specifically preserving public variables and exposing stdio headers, along with general security and correctness updates.

Sep 1, 2026

A security-focused release that backports fixes from version 1.12, including PVR security updates, security hardening for MCP components, and a fix to ensure persisted flows are retained when the header list refreshes.

Aug 25, 2026

A maintenance and stability release focusing on CI/CD improvements, MCP SDK fixes, and remediation of security findings from Mend scans.

Aug 19, 2026

A critical security patch release addressing vulnerabilities related to SQL injection, SSRF (Server-Side Request Forgery), and code execution.

Aug 11, 2026

A feature and security release enabling the agentic experience by default, enforcing runtime code execution policies, and improving agent tool duration tracking.

Aug 4, 2026

A bug fix release backporting security hardening measures from v1.11.2 and fixing issues related to MCP search registry queries and FastAPI.

Jul 28, 2026

A security hardening release focusing on outbound request protection, Docker improvements, and hardening MCP stdio and component code access.

Jul 23, 2026

A major version release introducing architectural changes including Bundle Separation (LFX), RBAC, A2A protocol support, and native v2 workflow endpoints.

Jul 23, 2026

A security and Python 3.14 readiness release blocking dangerous MCP configurations, enforcing sandboxing, and preparing for Python 3.14 support.

Jul 7, 2026

A CI/CD and security release fixing bundle naming workflows, blocking code injection, and hardening PythonREPL execution.

Jun 23, 2026