{
 "slug": "langflow",
 "name": "Langflow",
 "tagline": "Visual builder for LLM workflows and agents",
 "category": "ai-llm",
 "use_cases": [
  "agent-builder",
  "llm-workflows",
  "prototyping"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "Langflow-AI",
  "url": "https://langflow.org",
  "license": "MIT",
  "license_url": "https://github.com/langflow-ai/langflow/blob/main/LICENSE"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   80,
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "1.13.0",
   "last_build": "2026-10-24",
   "entity_id": "prod-xjugaa3tgntqq",
   "ami_alias": "/aws/service/marketplace/prod-xjugaa3tgntqq/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-cvj24xakn4zby",
   "recommended_instance_type": "t3.medium",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "1.12.4",
   "last_build": "2026-10-03",
   "offer_id": "langflow",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:langflow:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.langflow?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/langflow/",
  "json": "https://lynxroute.com/products/langflow/product.json"
 },
 "release_notes": [
  {
   "version": "1.13.0",
   "title": "Langflow 1.13.0",
   "notes": "* Langflow updated 1.12.4 -> 1.13.0, a feature release. MIT unchanged; secure defaults retained (auto-login disabled, telemetry off)\n* Triggers: schedule, inbound webhook, Slack, Microsoft and Google event triggers start flows with retries and dead-lettering\n* Managed connections with delegated OAuth for Google Workspace, Microsoft and Slack bundles, plus team and user administration API and CLI\n* Local knowledge bases move from Chroma to SQLite; new CLI tools convert SQLite to PostgreSQL and check instance integrity, with a guided migration page for superusers\n* Application audit log for flows and projects, GDPR data-subject erase, case-insensitive usernames and multi-user editing safety\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-24"
   }
  },
  {
   "version": "1.12.4",
   "title": "Langflow 1.12.4",
   "notes": "* Langflow 1.12.4 on Ubuntu 24.04 LTS - patch update from 1.12.2 (includes 1.12.3), security fixes and bug fixes; secure defaults retained (auto-login disabled, webhook and registration auth on by default). MIT licensed\n* Security: broad hardening of the custom-component code scanner and Python REPL sandbox, SSRF protection for connectors, knowledge bases and model provider endpoints, and removal of unsafe cache deserialization paths\n* Local file access by components is now restricted by default, and chat memory and stored flow credentials are scoped to their owner\n* Password hashing moved to bcrypt, and database credentials no longer appear in settings errors or logs\n* Langflow Assistant gains a slash-command menu, and Run Flow now returns its content when an Agent calls it as a tool\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-02",
    "azure": "2026-10-03"
   }
  },
  {
   "version": "1.12.2",
   "title": "Langflow 1.12.2",
   "notes": "* Langflow 1.12.2 on Ubuntu 24.04 LTS - patch update from 1.12.1, bug fixes and dependency security updates; secure defaults retained (auto-login disabled, webhook and registration auth on by default). MIT licensed\n* Dependency security fixes: patched Transformers and PyTorch releases, and DiskCache removed from the managed dependency graph\n* API hardening: 500 responses no longer echo request input, and message-history reads are indexed and bounded so flows with long chat history no longer freeze the editor\n* Guardrails component can now combine rule-based and model-based checks\n* Loop components feed each item into every fan-out branch, and Ollama support is restored in the Langflow Assistant\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-17",
    "azure": "2026-09-17"
   }
  },
  {
   "version": "1.12.1",
   "title": "Langflow 1.12.1",
   "notes": "* Langflow 1.12.1 on Ubuntu 24.04 LTS - patch update from 1.12.0, bug fixes only; secure defaults retained (auto-login disabled, webhook and registration auth on by default). MIT licensed\n* Logging fix: a single ERROR line no longer exhausts memory when a log file is configured, which this image does by default\n* Component catalog fixes: lazy loading no longer clears the built-in registry, and custom components no longer appear twice\n* Flow edges are now preserved when components are updated after a 1.12 upgrade\n* MCP servers that start slowly now connect instead of timing out at 20 seconds, and memory banks use the embedding provider you selected\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-11",
    "azure": "2026-09-13"
   }
  },
  {
   "version": "1.12.0",
   "title": "Langflow 1.12.0",
   "notes": "* Langflow 1.12.0 on Ubuntu 24.04 LTS - minor update from 1.11.4; secure defaults retained (auto-login disabled, webhook/registration auth on by default). MIT licensed\n* Role-based authorization foundations: scoped visibility prefiltering, source-aware role assignment grants and a shared database-backed policy bundle\n* Knowledge bases and memory banks now share common vector database backends, with a pgvector implementation and no sidecar dependency\n* Application telemetry can be exported to any OTLP backend, with new event-loop lag and database pool saturation metrics\n* Adds an opt-in sandboxed backend for code-execution components, and deterministic project deployment artifacts\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-06",
    "azure": "2026-09-09"
   }
  },
  {
   "version": "1.11.4",
   "title": "Langflow 1.11.4",
   "notes": "* Langflow 1.11.4 on Ubuntu 24.04 LTS - patch update from 1.11.3 on the 1.11 line; secure defaults retained (auto-login disabled, webhook/registration auth on by default). MIT licensed\n* Security: vulnerable dependency floors raised, npm overrides added, and the image dependency remediation for the 1.11.4 line completed\n* Fixes per-request MCP global variables not being merged with the stored ones, and a borrowed transaction being committed during startup MCP reconciliation\n* Fixes chained component input being sent as a user turn, and scopes suspended-run supersede to the submitting session\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-08-23"
   }
  },
  {
   "version": "1.11.3",
   "title": "Langflow 1.11.3",
   "notes": "* Langflow 1.11.3 on Ubuntu 24.04 LTS - patch update (from 1.11.0) on the 1.11 line, which added durable background flow execution and human-in-the-loop suspend/resume; secure defaults retained (auto-login disabled, webhook/registration auth on by default). MIT licensed\n* Fixes AWS fallbacks in the Write File component, retries flow updates on SQLite locks, and closes protocol gaps in markdown rendering\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-08-18",
    "azure": "2026-08-19"
   }
  },
  {
   "version": "1.11.0",
   "title": "Langflow 1.11.0",
   "notes": "* Langflow 1.11.0 on Ubuntu 24.04 LTS - minor update (from 1.10.2) adding durable background flow execution and human-in-the-loop suspend/resume; secure defaults retained (auto-login disabled, webhook/registration auth on by default). MIT licensed\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-07-23",
    "azure": "2026-07-27"
   }
  },
  {
   "version": "1.10.2",
   "title": "Langflow 1.10.2",
   "notes": "* Langflow 1.10.1 on Ubuntu 24.04 LTS - maintenance release (patch from 1.10.0) with extensive security hardening: webhook and registration-endpoint authentication enabled by default, expanded SSRF protection across URL components, and 20+ additional security patches\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-07-10",
    "azure": "2026-07-13"
   }
  },
  {
   "version": "1.10.1",
   "title": "Langflow 1.10.1 - June 2026",
   "notes": "* Langflow 1.10.1 on Ubuntu 24.04 LTS - maintenance release (patch from 1.10.0) with extensive security hardening: webhook and registration-endpoint authentication enabled by default, expanded SSRF protection across URL components, and 20+ additional security patches\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-06-24"
   }
  },
  {
   "version": "1.10.0",
   "title": "Langflow 1.10.0 - June 2026",
   "notes": "* Langflow 1.10.0 on Ubuntu 24.04 LTS - redesigned Knowledge component (unified ingestion + retrieval), OpenRouter as a first-class model provider, Redis-backed job queue for multi-worker deployments; SSRF + DNS-rebinding protection, public-registration gating\n* Certbot pre-installed for one-command trusted HTTPS\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-06-16",
    "azure": "2026-06-22"
   }
  },
  {
   "version": "1.9.6",
   "title": "Langflow 1.9.6 - June 2026",
   "notes": "* Security dependency upgrades and bug fixes (agent streaming, tool calling, Docker base image updates)\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-06-06",
    "azure": "2026-06-07"
   }
  },
  {
   "version": "1.9.3",
   "title": "Langflow 1.9.3 - May 2026",
   "notes": "* Langflow 1.9.3 on Ubuntu 24.04 LTS\n* Security release - SSRF vulnerability protection with DNS rebinding prevention\n  (LE-763), CVE fixes from MEND/CIMS scans (LE-1123), langchain-classic upgraded\n  to 1.0.7, security dependencies refreshed\n* New: Python 3.14 support\n* Bug fixes - model toggle stability, Agent dropdown refresh after provider\n  change, ToolGuard lazy imports, postgres docker image pinned to bookworm\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-05-23"
   }
  },
  {
   "version": "1.9.1",
   "title": "Langflow 1.9.1 - April 2026",
   "notes": "* Updated to Langflow 1.9.1\n* Bug fixes and stability improvements\n* Known: litellm 1.83.0 (transitive dep) has GHSA-xqmj-j6mv-4862 HIGH CVE - fix pending upstream in 1.9.2\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-04-30"
   }
  }
 ],
 "release_history": [
  {
   "version": "1.13.0",
   "aws": "2026-10-24"
  },
  {
   "version": "1.12.4",
   "aws": "2026-10-02",
   "azure": "2026-10-03"
  },
  {
   "version": "1.12.2",
   "aws": "2026-09-17",
   "azure": "2026-09-17"
  },
  {
   "version": "1.12.1",
   "aws": "2026-09-11",
   "azure": "2026-09-13"
  },
  {
   "version": "1.12.0",
   "aws": "2026-09-06",
   "azure": "2026-09-09"
  },
  {
   "version": "1.11.4",
   "aws": "2026-08-23"
  },
  {
   "version": "1.11.3",
   "aws": "2026-08-18",
   "azure": "2026-08-19"
  },
  {
   "version": "1.11.0",
   "aws": "2026-07-23",
   "azure": "2026-07-27"
  },
  {
   "version": "1.10.2",
   "aws": "2026-07-10",
   "azure": "2026-07-13"
  },
  {
   "version": "1.10.1",
   "aws": "2026-06-24"
  },
  {
   "version": "1.10.0",
   "aws": "2026-06-16",
   "azure": "2026-06-22"
  },
  {
   "version": "1.9.6",
   "aws": "2026-06-06",
   "azure": "2026-06-07"
  },
  {
   "version": "1.9.3",
   "aws": "2026-05-23"
  },
  {
   "version": "1.9.1",
   "aws": "2026-04-30"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-xjugaa3tgntqq/latest \\\n  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer langflow --plan payg-gen2\naz vm create -g my-rg -n langflow --size Standard_D2s_v3 \\\n  --image lynxroute:langflow:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Langflow is a visual drag-and-drop builder for LLM-powered applications - a Python (FastAPI) and TypeScript (React) stack that lets developers compose chains, agents, and retrieval-augmented generation (RAG) pipelines from pre-built components on a canvas, then deploy them as REST endpoints. It integrates with 100+ LLM providers and vector stores (OpenAI, Anthropic, AWS Bedrock, Azure OpenAI, Ollama, Qdrant, Chroma, Pinecone) through the underlying LangChain abstractions, plus tool nodes for web search, SQL and file I/O. Persists flows, conversations and configuration in PostgreSQL. MIT license - lock-in-free alternative to LangSmith and other proprietary visual AI builders, with full Python source for every component.",
  "image_adds": "Security hardening:\n* Authentication enabled - LANGFLOW_AUTO_LOGIN=False\n* Admin password equals EC2 Instance ID\n* Nginx reverse proxy with TLS - Langflow bound to localhost only\n* UFW firewall - ports 22, 80, 443 only\n* fail2ban, AppArmor\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}