Langflow: Weak Fernet Key via random.seed()

Langflow uses Python's non-cryptographic random module seeded with SECRET_KEY to derive Fernet encryption keys for stored credentials. When SECRET_KEY is shorter than 32 characters, the encryption key is fully deterministic and reproducible, allowing attackers to decrypt all stored API keys and secrets without brute force.

Disclosed 5 October 2026 · Record updated 5 October 2026

Impact

All stored user credentials (API keys, LLM provider secrets, database passwords) encrypted with weak Fernet keys are vulnerable to decryption by attackers who obtain the SECRET_KEY.

Our coverage

A vault's iron door swings open as someone inserts a single master key, revealing rows of glowing credential tokens spilling into shadow.

Vulnerabilities

Langflow flaw lets attackers decrypt stored API keys

A critical weakness in how Langflow derives its encryption key means anyone with the instance secret can read every stored credential, according to a GitHub advisory.

5 Oct 2026

Sources

github.comhttps://github.com/advisories/GHSA-jxw3-mjmx-3pqm