CVE-2026-10561
Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation
Langflow's built-in Python interpreter components — PythonREPLComponent (Python Interpreter) and the legacy PythonREPLToolComponent (Python REPL Tool) — executed arbitrary user- or model-supplied Python code inside flows without effective sandboxing.
- No known exploitation
- Severity
- Critical, CVSS 9.9 (v3.1)
- EPSS
- 0.82% chance of exploitation in 30 days (EPSS, as of Oct 23, 2026)
- Affected packages
- langflow (pip) < 1.10.1, fixed in 1.10.1 · GHSA-8qpj-27x8-pwpq