8 matches found
CVE-2026-101861
Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious repr method into component input options lists. The eval sink is triggered when a...
CVE-2026-101861 Langflow Code Execution via eval() in Component Input Schema
Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious repr method into component input options lists. The eval sink is triggered when a...
CVE-2026-101861 Langflow Code Execution via eval() in Component Input Schema
Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious repr method into component input options lists. The eval sink is triggered when a...
EUVD-2026-88338
Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious repr method into component input options lists. The eval sink is triggered when a...
CVE-2026-101861
Langflow versions 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 are vulnerable to code execution due to an unsafe eval() sink in schema.py. Authenticated attackers can achieve execution by placing a Python object with a malicious __repr__ method into component input options lists. The vulnerabili...
CVE-2026-101861 Langflow Code Execution via eval() in Component Input Schema
Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious repr method into component input options lists. The eval sink is triggered when a...
PT-2026-99924
Name of the Vulnerable Software and Affected Versions Langflow versions 0.0.94 through 1.11.x Langflow versions 1.0.16 through 1.11.x Description An unsafe eval function in schema.py allows authenticated attackers to achieve remote code execution. This occurs when a Python object containing a...
CVE-2026-101861: Improper Neutralization of Directives in Dynamically Evaluated Code
Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious repr method into component input options lists. The eval sink is triggered when a...