Agents
Langflow 1.11.1 patches SSRF in its A2A agent and PaddleOCR base URLs, and turns the agentic experience on by default
The July 28 release makes the A2A agent and PaddleOCR base URL fields honor the connector loopback policy (PR #14265), closing a server-side request forgery path where an agent-configurable base URL could reach internal services — the same shipped-insecure-default pattern Langflow has been criticized for with allow_dangerous_code. It also enables the agentic experience by default in settings, backports an MCP SDK <2.0 pin for uvx-launched servers to survive the SDK 2.0 cutover, and stops legacy component aliases from importing every bundle at startup.
↳ Follow the thread