Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.1

Langflow may run code from crafted input

CVE-2026-101861 · published 21 days ago
Summary

If a user is logged in to Langflow version 1.0.16 up to but not including 1.12.0 (or 0.0.94 up to but not including 1.12.0), they can cause the system to execute arbitrary Python code by submitting a specially crafted component option. This can let an attacker run commands on the server that hosts Langflow. Upgrade Langflow to version 1.12.0 or later, and limit access to trusted users.

What to do
  • Update langflow-ai langflow to version 1.12.0 or later.
Affected software
VendorProductAffected versions
langflow-ai langflow < 1.12.0
Original advisory text
Langflow Code Execution via eval() in Component Input Schema
Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious __repr__ method into component input options lists. The eval() sink is triggered when a component is converted into a LangChain tool via ComponentToolkit.get_tools(), including during custom component saves through the API, by interpolating options into a Literal type string that is passed directly to eval() without safe evaluation controls.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
2.1 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-94Code Injection
CWE-95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
Timeline
Published28 Sep 2026
Updated19 Oct 2026
First seen28 Sep 2026
Sources
CVE-2026-101861 · NVD
CVE-2026-101861 · MITRE
CVE-2026-101861 · OSV
GHSA-33p4-w7j3-33mw · GHSA
Track software like this
Free during beta