CVE-2026-101861

Name of the Vulnerable Software and Affected Versions Langflow versions 0.0.94 through 1.11.x Langflow versions 1.0.16 through 1.11.x

Description An unsafe eval() function in schema.py allows authenticated attackers to achieve remote code execution. This occurs when a Python object containing a malicious repr method is placed into component input options lists. The issue is triggered during the conversion of a component into a LangChain tool via the ComponentToolkit.get tools() function, which can happen during custom component saves through the API. The process interpolates options into a Literal type string that is passed to eval() without safe evaluation controls.

Recommendations Update Langflow to version 1.12.0 or later. Restrict the use of the ComponentToolkit.get tools() function and custom component saves via the API until the update is applied.