Description (CNA)
Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious __repr__ method into component input options lists. The eval() sink is triggered when a component is converted into a LangChain tool via ComponentToolkit.get_tools(), including during custom component saves through the API, by interpolating options into a Literal type string that is passed directly to eval() without safe evaluation controls.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| langflow-ai / langflow | affected 1.0.16 before 1.12.0; affected 0.0.94 before 1.12.0 |
CWE
CWE-95, CWE-94
References
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-33p4-w7j3-33mw
- https://github.com/langflow-ai/langflow/releases#release-v1.12.0
ADP enrichment
No English description supplied.
No references supplied.