CVE-2026-10561: Langflow PythonREPLComponent Unsandboxed Code Execution Vulnerability
Summary
CVE-2026-10561: Langflow's built-in Python interpreter components — PythonREPLComponent (Python Interpreter) and the legacy PythonREPLToolComponent (Python REPL Tool) — executed arbitrary user- or model-supplied Python code inside flows... Affects langflow versions < 1.10.1. Fixed in 1.10.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Langflow is an open-source framework designed for building and managing workflows that integrate various components, including Python code execution. It provides users with the ability to create flows that can utilize Python scripts through components like PythonREPLComponent. However, a critical vulnerability was discovered in these components, allowing authenticated users to execute arbitrary Python code without proper sandboxing, leading to severe security risks.
Vulnerability Detail
The vulnerability arises from Langflow's Python interpreter components, specifically the PythonREPLComponent and the legacy PythonREPLToolComponent, which execute user-supplied Python code without effective sandboxing. This flaw allows any authenticated user who can edit and run a flow to achieve remote code execution (RCE) with the privileges of the Langflow service. The root cause is code injection, where raw input is passed to LangChain's PythonREPL, which is not a security sandbox. As a result, attackers can escalate privileges to superuser or compromise the host system. The vulnerability is classified with a CVSS score of 9.9, indicating a critical severity level.
How To Fix
Latest published version: 1.14.0.dev2 as of 22 Oct 2026
pip install --upgrade "langflow==1.14.0.dev2"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.10.1
This is the first release that contains the fix.
pip install --upgrade "langflow==1.10.1"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
For immediate mitigation, you can set the following environment variables to disable the interpreter components: LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false or LANGFLOW_BLOCK_CODE_INTERPRETER_COMPONENTS=true. This will prevent the execution of any untrusted code until the package is updated.
Conclusion
The vulnerability CVE-2026-10561 in Langflow poses significant security risks due to its ability to allow authenticated users to execute arbitrary code. It is crucial to upgrade to the patched versions and implement recommended workarounds to mitigate potential threats.
See every vulnerability recorded for langflow →
FAQ
CVE-2026-10561 is a vulnerability in Langflow that allows authenticated users to execute arbitrary Python code without proper sandboxing, leading to remote code execution and potential privilege escalation.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The impacts include unauthorized execution of Python or OS commands, privilege escalation to superuser, and the ability to read or modify sensitive data.
Upgrade Langflow to version 1.10.1 or later, preferably to version 1.12.3, and implement the recommended environment variable settings to disable untrusted code execution.
The CVSS score of this vulnerability is 9.9, indicating a critical severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for langflow.
