Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation

SummaryLangflow's built-in Python interpreter components — PythonREPLComponent Python Interpreter and the legacy PythonREPLToolComponent Python REPL Tool — executed arbitrary user- or model-supplied Python code inside flows without effective sandboxing. Because the code ran in-process with the...