CVE-2026-101861
Received Received - Intake

Code Execution via Unsafe eval() in Langflow

Publication date: 2026-09-28

Last updated on: 2026-09-28

Assigner: VulnCheck

Description
Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious __repr__ method into component input options lists. The eval() sink is triggered when a component is converted into a LangChain tool via ComponentToolkit.get_tools(), including during custom component saves through the API, by interpolating options into a Literal type string that is passed directly to eval() without safe evaluation controls.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-28
Last Modified
2026-09-28
Generated
2026-09-28
AI Q&A
2026-09-28
EPSS Evaluated
N/A
NVD
CVE-2026-101861
EUVD
EUVD-2026-88338

Affected Vendors & Products

Showing 6 associated CPEs
Vendor Product Version / Range
langflow langflow to 1.12.0 (exc)
langflow-ai langflow to 1.12.0 (exc)
langflow-ai langflow 1.12.0
langflow-ai langflow 1.12.1
langflow-ai langflow 1.12.2
langflow-ai langflow 1.12.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-95 The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an unsafe eval() flaw in Langflow versions before 1.12.0. It occurs in schema.py where authenticated attackers can execute arbitrary code by injecting a Python object with a malicious __repr__ method into component input options. The eval() function is triggered when components are converted to LangChain tools, such as during custom component saves via the API.

Detection Guidance

Check Langflow version with 'pip show langflow' or 'langflow --version'. If using versions before 1.12.0, the system is vulnerable. Inspect schema.py for eval() usage in create_input_schema() and create_input_schema_from_dict() functions.

Impact Analysis

An attacker with access could execute arbitrary code on the system running Langflow. This may lead to data breaches, unauthorized system access, or further network compromise. Exploitation requires authenticated access but could be severe if attackers gain control of a component.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Upgrade Langflow to version 1.12.0 or later immediately. Restrict access to custom component creation to trusted users only. Review and remove any untrusted custom components.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101861. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart