Langflow is a tool for building and deploying AI-powered agents and workflows. An unauthenticated remote shell injection vulnerability exists in multiple GitHub…

An unauthenticated remote shell injection vulnerability exists in Langflow's GitHub Actions workflows prior to version 1.9.0. Attackers can inject arbitrary shell commands via malicious branch names or pull request titles through unsanitized GitHub context variables. This leads to secret exfiltration, infrastructure manipulation, and supply chain compromise during CI/CD execution. The vulnerability affects multiple workflow files and allows full access to CI secrets like GITHUB_TOKEN. Version 1.9.0 patches the issue by properly sanitizing user-controlled input.