CVE-2026-101861
Description
Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious __repr__ method into component input options lists. The eval() sink is triggered when a component is converted into a LangChain tool via ComponentToolkit.get_tools(), including during custom component saves through the API, by interpolating options into a Literal type string that is passed directly to eval() without safe evaluation controls.
How to fix
- langflow-ai langflow1.12.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| langflow-ai langflow | 1.0.16 ≤ v < 1.12.0, 0.0.94 ≤ v < 1.12.0 | 1.12.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.