CVE-2026-101861— Langflow Code Execution via eval() in Component Input Schema
Quick assessment
Affected
langflow-ai langflow
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Langflow 1.12.0 之前版本的 1.0.16 以及 1.12.0 之前版本的 0.0.94 中，存在一个在 schema.py 文件中的不安全的 eval() 漏洞。该漏洞允许经过身份验证的攻击者通过在组件输入选项列表中插入具有恶意 __repr__ 方法的 Python 对象，从而实现远程代码执行。 当组件通过 ComponentToolkit.get_tools() 被转换为 LangChain 工具时（包括通过 API 保存自定义组件的过程中），该 eval() 漏洞会被触发。具体来说，选项会
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| langflow-ai | langflow | 1.0.16< 1.12.0 |
affected |
0.0.94< 1.12.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-101861
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Langflow Code Execution via eval() in Component Input Schema
Source: CVE Program / CVE List V5
Vulnerability Description
Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious __repr__ method into component input options lists. The eval() sink is triggered when a component is converted into a LangChain tool via ComponentToolkit.get_tools(), including during custom component saves through the API, by interpolating options into a Literal type string that is passed directly to eval() without safe evaluation controls.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
动态执行代码中指令转义处理不恰当(Eval注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| langflow-ai | langflow | 1.0.16 ~ 1.12.0 | - |
|
II. Public POCs for CVE-2026-101861
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-101861
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-101861 (1)
IV. Related Vulnerabilities
Same product: langflow
-
CVE-2026-48520
Langflow: Unauthenticated Shareable Playground arbitrary loc -
CVE-2026-33760
Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enfor -
CVE-2026-42867
Langflow: Path Traversal in Knowledge Bases API via Creation -
CVE-2026-55255
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint -
CVE-2026-55423
Langflow: Logout button does not clear session
Same vendor: langflow-ai
-
CVE-2026-48520
Langflow: Unauthenticated Shareable Playground arbitrary loc -
CVE-2026-33760
Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enfor -
CVE-2026-42867
Langflow: Path Traversal in Knowledge Bases API via Creation -
CVE-2026-55255
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint -
CVE-2026-55423
Langflow: Logout button does not clear session
Same weakness: CWE-95
-
CVE-2024-42002
Unsafe use of eval() method in ros2 topic hz tool -
CVE-2026-100741
Improper Neutralization of Directives in Dynamically Evaluat -
CVE-2026-100842
MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox B -
CVE-2026-100840
MONAI through 1.6.0 Remote Code Execution via bundle configu -
CVE-2026-57149
plone.app.portlets Vulnerable to Remote Code Execution via T
V. Comments for CVE-2026-101861
No comments yet