enterpriseai.tools
Open navigation menu

LangFlow

LangFlow / DataStax

Open Source

Visual flow builder for LLM pipelines and agent workflows with self-hosting support.

Curated by Tiberiu ArvaStale

MITVersion 1.11.4Released 2026-08-19153,570
DocsRepository

Strengths

  • Visual workflow canvas
  • LangChain ecosystem fit
  • API and playground handoff

Practitioner note

Useful for visual experimentation and internal workflow builds, though larger enterprise rollouts should validate long-term governance and platform direction after the IBM/DataStax shift.

Warning

LangFlow: DataStax Cloud is shutting down April 9, 2026. Self-hosting remains available.

Governance posture

Reviewed 2026-05-26
YesData residency

Self-hosted gives customer-controlled residency (DataStax cloud shut down 2026-04).

Source
YesDeployment model

Self-hosted (Docker/Kubernetes/local); IBM/DataStax managed cloud deprecated. (self-hosted)

Source
UnknownAudit logging

No dedicated audit-logging documentation for the self-hosted OSS edition.

N/ASOC 2

No active managed cloud; self-hosted operators carry their own posture.

N/AISO 27001

No active managed cloud to certify.

N/AISO 42001

Tooling component; customer-operated.

N/AEU AI Act

Visual workflow-builder framework, not an AI model/provider. (role: not-applicable)

YesLicense risk

MIT — permissive, OSI-approved. (low)

Source

EU AI Act obligations

Risk tier: Not applicable · as of 2026-08-23

Source-backed information mapped from LangFlow's tracked risk tier — not legal advice. Obligations depend on how your organisation deploys the system; see the full obligation reference and timeline.

This record's EU AI Act risk tier is marked not applicable, so no tier-specific obligations attach. Deployers embedding it in an AI system in scope of the Act should assess that system's own tier.

Change history

Source-backed and auto-detected events for this tool, newest first.

  1. ReleaseHigh impact

    Langflow 1.11.3 shipped a security-focused patch set covering SQL target overrides, path containment, symlink handling, ambiguous URL authorities, admin-only component builds, and MCP redirect-based SSRF exposure.

    Release 1.11.3 · langflow-ai/langflow
  2. Release

    LangFlow 1.10.2 added global variable model overrides and other workflow/runtime improvements.

    Release v1.10.2 · langflow-ai/langflow
  3. ReleaseHigh impact

    LangFlow 1.10.1 added first-class local-model support for the assistant, created stable bundle release plumbing, fixed agent tool-calling model handling, revalidated redirects in the URL component to reduce SSRF risk, and limited private flow stream exposure.

    Release 1.10.1 · langflow-ai/langflow
  4. Release

    LangFlow 1.10.0 added memory base APIs and UI components, sandboxed file-system support for agents, and native structured output on its Agent component.

    Release 1.10.0 · langflow-ai/langflow
  5. ReleaseHigh impact

    LangFlow 1.9.3 shipped as a critical security release with SSRF protection, DNS rebinding prevention, dependency CVE fixes, and an explicit immediate-upgrade recommendation.

    Release 1.9.3 · langflow-ai/langflow · GitHub
  6. Release

    LangFlow 1.9.2 added telemetry to deployment APIs and shipped fixes across env var resolution, Google embeddings dimensions, and related deployment/runtime paths.

    Release 1.9.2 · langflow-ai/langflow · GitHub
  7. ReleaseHigh impact

    LangFlow 1.9.1 shipped security fixes for MCP path traversal, cross-user disclosure, upload auth, IDOR, XSS handling, and webhook auth defaults, alongside Gemini 3 tool-calling updates.

    Release 1.9.1 · langflow-ai/langflow · GitHub
  8. Release
    Langflow release adds Windows Playwright coverage

    Langflow's April 7 release added Windows Playwright coverage to nightly builds and refreshed desktop documentation, indicating continued maintenance after the DataStax-to-IBM deal.

    Releases · langflow-ai/langflow
  9. AcquisitionHigh impact
    IBM announces DataStax acquisition, bringing Langflow into scope

    IBM said it would acquire DataStax, explicitly naming Langflow as part of the transaction and tying the low-code AI builder into IBM's watsonx roadmap.

    IBM to Acquire DataStax, Deepening watsonx Capabilities and Addressing Generative AI Data Needs for the Enterprise
  10. Auto-detected
    githubStars: 152827 → 153570

    From snapshot diff 2026-08-04 → 2026-08-22.

  11. Auto-detected
    lastRelease: 2026-07-28 → 2026-08-19

    From snapshot diff 2026-08-04 → 2026-08-22.

  12. Auto-detected
    version: 1.11.1 → 1.11.4

    From snapshot diff 2026-08-04 → 2026-08-22.

  13. Auto-detected
    githubStars: 151616 → 152827

    From snapshot diff 2026-07-17 → 2026-08-04.

  14. Auto-detected
    lastRelease: 2026-07-07 → 2026-07-28

    From snapshot diff 2026-07-17 → 2026-08-04.

  15. Auto-detected
    version: 1.10.2 → 1.11.1

    From snapshot diff 2026-07-17 → 2026-08-04.

  16. Auto-detected
    githubStars: 149327 → 151616

    From snapshot diff 2026-06-07 → 2026-07-17.

  17. Auto-detected
    lastRelease: 2026-05-29 → 2026-07-07

    From snapshot diff 2026-06-07 → 2026-07-17.

  18. Auto-detected
    version: 1.9.5 → 1.10.2

    From snapshot diff 2026-06-07 → 2026-07-17.

Explore the category

Compare this tool against the rest of its category and the cloud platform foundation layer.

AI Orchestration (Orchestration)

Return to the category grid to compare governance posture across every tracked tool.

Platforms (Platforms)

Review Microsoft Foundry, Amazon Bedrock, and Gemini Enterprise Agent Platform as the foundation layer.

Weekly updates (Updates)

Track releases, deprecations, license changes, and other market movements.