{"id":"CVE-2026-0769","published":"2026-01-23T03:28:47Z","modified":"2026-02-26T14:44:26Z","title":"Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability","vendor":"Langflow","product":"Langflow","tier":"core","eol":null,"affectedVersions":[{"vendor":"Langflow","product":"Langflow","versions":["1.3.2"]}],"description":{"text":"Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of eval_custom_component_code function. The issue results from the lack of proper validation of a user-supplied string before using it to execute python code. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26972.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is an eval injection in the eval_custom_component_code function of Langflow, where a user-supplied string is executed as Python code without proper validation. An remote attacker who can reach an affected Langflow installation can execute arbitrary code in the context of the running process, and no authentication or user interaction is required.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T08:32:03Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.41152,"percentile":0.98665,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-06-24","exploitedFirstSeen":"2026-08-28","ransomware":false,"evidence":[{"url":"https://www.vulncheck.com/blog/pwning-the-ai-stack","date":"2026-08-28"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-95","name":"Improper Neutralization of Directives in Dynamically Evaluated Code"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-035/","tags":["x_research-advisory"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2026-4475","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-4475","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2026-09-02","earliestUrl":"https://github.com/rmhowe425/POC-CVE-2026-0769","repos":[{"name":"rmhowe425/POC-CVE-2026-0769","url":"https://github.com/rmhowe425/POC-CVE-2026-0769","stars":0,"created":"2026-09-02"}]},"metasploit":[{"name":"Langflow AI Custom Component Eval Injection Unauth RCE","module":"exploit/multi/http/langflow_unauth_rce_cve_2026_0769","type":"exploit","disclosureDate":"2026-01-22","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_unauth_rce_cve_2026_0769.rb"}],"first":{"date":"2026-01-22","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_unauth_rce_cve_2026_0769.rb"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2026-01-22","kind":"exploit-public","label":"First public exploit: Metasploit; later: PoC-in-GitHub 2026-09-02","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_unauth_rce_cve_2026_0769.rb","provenance":"source"},{"date":"2026-01-23","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2026-0769","provenance":"source"},{"date":"2026-08-28","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.vulncheck.com/blog/pwning-the-ai-stack","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":71.6,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 130 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.73,"detail":"percentile 0.9867"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}