Sale of a 0-day vulnerability in Langflow

For informational purposes only.

Langflow is an open-source low-code platform for building, testing, and deploying applications based on large language models (LLMs), AI agents, and RAG pipelines.

According to the seller, testing yielded a valid OpenAI API key.

Vulnerability type: RCE Affected versions: 1.12.0

Price: $2K