Vulnerability · Published Sep 28, 2026 · Assigned by VulnCheck

CVE-2026-101861Langflow Code Execution via eval() in Component Input Schema

Medium 4.1

In plain English

A medium-severity code injection in langflow from langflow-ai. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.1)4.1Medium

Exploit odds (30 days)0.2%top 90.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious __repr__ method into component input options lists. The eval() sink is triggered when a component is converted into a LangChain tool via ComponentToolkit.get_tools(), including during custom component saves through the API, by interpolating options into a Literal type string that is passed directly to eval() without safe evaluation controls.

Affected products (as reported)

Vendor	Product	Versions
langflow-ai	langflow	1.0.16 – before 1.12.00.0.94 – before 1.12.0

Weakness: CWE-95, CWE-94 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L

References

GitHub Security Advisory (GHSA-33p4-w7j3-33mw) vendor-advisory
Release Notes release-notes, patch