Vulnerability in langflow-ai langflow

[ Description ]Official description

Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious __repr__ method into component input options lists. The eval() sink is triggered when a component is converted into a LangChain tool via ComponentToolkit.get_tools(), including during custom component saves through the API, by interpolating options into a Literal type string that is passed directly to eval() without safe evaluation controls.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund28 Sep 2026WID-SEC-2026-3616

  Langflow: Multiple vulnerabilities Translated from German

  CVE-2026-105698CVE-2026-101861CVE-2026-105697

[ References ]References

• github.com/langflow-ai/langflow/releases
• github.com/langflow-ai/langflow/security/advisories/GHSA-33p4-w7j3-33mw