CVE-2026-7700: Langflow Code Injection Vulnerability in Smart Transform Component
Summary
CVE-2026-7700: Langflow: Prompt injection in Langflow Smart Transform can lead to code execution. Affects langflow versions >= 1.3.0, < 1.10.3. Fixed in 1.10.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Langflow is an open-source framework designed for building and managing workflows that utilize language models. It allows users to create complex flows that can interact with various data sources and perform transformations using Python code. The Smart Transform component, specifically, is responsible for generating Python lambdas based on user-defined instructions and input data. However, this component has a critical vulnerability that allows for code injection, potentially leading to unauthorized code execution.
Vulnerability Detail
Langflow versions 1.3.0 through 1.10.2 contain a code-injection vulnerability in the Smart Transform component. The vulnerability arises from the way the component constructs a prompt for a language model to generate a Python lambda function. It performs minimal syntactic checks and uses Python's eval function to execute the generated code. An attacker can exploit this by injecting malicious instructions through the Instructions field, allowing them to execute arbitrary code with the privileges of the Langflow service process. This can lead to exposure or modification of sensitive data and resources.
How To Fix
Latest published version: 1.14.0.dev2 as of 22 Oct 2026
pip install --upgrade "langflow==1.14.0.dev2"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.10.3
This is the first release that contains the fix.
pip install --upgrade "langflow==1.10.3"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Until an upgrade is possible, users can implement the following workarounds: 1. Remove Smart Transform from runnable flows. 2. Restrict flow creation, editing, and execution to trusted users. 3. Avoid routing untrusted or externally controlled data through Smart Transform. 4. Limit the Langflow process's filesystem, network, and credential access.
Conclusion
The vulnerability identified as CVE-2026-7700 in Langflow poses a significant risk due to its potential for code injection and arbitrary code execution. Users are strongly advised to upgrade to version 1.10.3 or later to mitigate this risk. Until an upgrade can be performed, implementing the recommended workarounds is essential to protect sensitive data and resources.
See every vulnerability recorded for langflow →
FAQ
CVE-2026-7700 is a code injection vulnerability found in the Smart Transform component of Langflow, which can allow attackers to execute arbitrary code.
Langflow versions 1.3.0 through 1.10.2 are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot upgrade immediately, implement the suggested workarounds to mitigate the risk until you can update to a secure version.
The CVSS score of this vulnerability is 8.8, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for langflow.
