Langflow AI Custom Component Eval Injection Unauthenticated Remote Code Execution

Langflow version 1.3.2 is susceptible to unauthenticated remote code execution due to improper input validation in the evalcustomcomponentcode function. Arbitrary code executes under the context of the backend Langflow process. This module requires Metasploit: https://metasploit.com/download...

CVE-2026-0769

Langflow evalcustomcomponentcode Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-0769 Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability

Langflow evalcustomcomponentcode Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-0769

Langflow evalcustomcomponentcode Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-0769: Improper Neutralization of Directives in Dynamically Evaluated Code

Langflow evalcustomcomponentcode Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

Langflow AI Custom Component Eval Injection Unauth RCE

Langflow version 1.3.2 is susceptible to unauthenticated remote code execution due to improper input validation in the evalcustomcomponentcode function. Arbitrary code executes under the context of the backend Langflow process. Module Options msf use exploit/multi/http/langflow/unauthrcecve202607...