CVE-2026-101861

Langflow versions 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 are vulnerable to code execution due to an unsafe eval() sink in schema.py. Authenticated attackers can achieve execution by placing a Python object with a malicious __repr__ method into component input options lists. The vulnerabili...