CVE-2026-0769
Unauthenticated remote code execution via eval injection in Langflow.
A critical vulnerability in Langflow's eval_custom_component_code function fails to validate user-supplied input before executing Python code, allowing an unauthenticated attacker to remotely run arbitrary code on affected systems. Any installation of Langflow is at risk. No fixes have been released yet.
Langflow · Updated 28 Oct · From the public records
Being exploitedNot reportedNo attacks reported in the records
CISA known exploitedNot listedThe US list of flaws under attack
SeveritycriticalCVSS 9.8 of 10
FixNot yetSee what to do below
Am I affected?
The records do not list fixed versions yet. Check the vendor's advisory below.
What to do
- Disable remote access to Langflow or restrict network exposure until a fix is available, as advised by the ZDI report.
- Monitor vendor channels for a security update from Langflow's maintainers.
What happened
- 23 OctRapid7 mentions the vulnerability in its Metasploit Wrap Up report.
The record
| CVE | What it is | Severity | CISA listed | Exploit chance, 30 days |
|---|---|---|---|---|
| CVE-2026-0769 | Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability | critical 9.8 | No | 41% |
Our reporting
We have not reported on it. It is here because the sources below did.
Reported elsewhere
Rapid7 · 23 OctMetasploit Wrap Up: Langflow, MongoDB, and More ↗The records
CVE-2026-0769 on NVD ↗Is anything you run affected?Members connect Zotpaper to their AI assistant. It checks your own project against every vulnerability on this page and the others we track, and says what to update.
How it works