●PocketClawAI security alerts
Sign in
mediumCVSS 4.1NVD status: Awaiting Analysis

CVE-2026-101861

Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious __re...

ComponentLangflow, LangChain
Severitymedium (CVSS 4.1)
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
Published (NVD)2026-09-28
Last modified2026-09-30
Affected versionsnot published yet, see the advisory
Fixed insee the vendor advisory
WeaknessCWE-94CWE-95
CISA KEVnot listed

NVD description

Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious __repr__ method into component input options lists. The eval() sink is triggered when a component is converted into a LangChain tool via ComponentToolkit.get_tools(), including during custom component saves through the API, by interpolating options into a Literal type string that is passed directly to eval() without safe evaluation controls.

Does CVE-2026-101861 hit the version you run?Paste your docker-compose.yml, requirements.txt or package.json. The scanner checks your pinned versions against this CVE and every other one we track for Langflow.
Check my stack

What to do

  • NVD lists no fixed version yet: follow the vendor advisory below and keep Langflow off the public internet until a fix ships.
  • Do not expose the component's API or UI to the internet without authentication in front of it.

Sources

Read more

Other Langflow CVEs

high
CVE-2026-88962CVSS 8.8

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code...

Langflow
2026-10-07high
CVE-2026-93445CVSS 8.1

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of gener...

Langflow
2026-10-07high
CVE-2026-103360CVSS 8.1

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation...

Langflow
2026-10-07critical
CVE-2026-104334CVSS 9.8

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

Langflow
2026-10-07high
CVE-2026-93443CVSS 7.5

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization o...

Langflow
2026-10-07high
CVE-2026-93447CVSS 7.5

IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious...

Langflow
2026-10-07

All Langflow CVEs