CVE-2026-0769
Critical9.8Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerabilitytitle from the CVE record
Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of eval_custom_component_code function. The issue results from the lack of proper validation of a user-supplied string before using it to execute python code. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26972.
- CVSS
- 9.8v3.0
- EPSS (exploit probability)
- 41.2%99th pct
- CISA KEV
- Not listed
EPSS trendFIRST daily scores, last 90 days
Daily values
| Score date | EPSS | Percentile |
|---|---|---|
| 2026-10-23 | 41.2% | 98.7% |
| 2026-10-22 | 41.2% | 98.7% |
| 2026-10-21 | 41.2% | 98.7% |
| 2026-10-20 | 41.2% | 98.7% |
| 2026-10-19 | 41.2% | 98.7% |
| 2026-10-18 | 41.7% | 98.7% |
| 2026-10-17 | 41.7% | 98.7% |
| 2026-10-16 | 41.7% | 98.7% |
| 2026-10-15 | 41.7% | 98.7% |
| 2026-10-14 | 41.7% | 98.7% |
| 2026-10-13 | 41.7% | 98.7% |
| 2026-10-12 | 41.7% | 98.7% |
| 2026-10-11 | 41.7% | 98.7% |
| 2026-10-10 | 41.7% | 98.7% |
| 2026-10-09 | 41.7% | 98.7% |
| 2026-10-08 | 32.3% | 98.3% |
| 2026-10-07 | 32.3% | 98.3% |
| 2026-10-06 | 32.3% | 98.3% |
| 2026-10-05 | 32.3% | 98.3% |
| 2026-10-04 | 32.3% | 98.3% |
| 2026-10-03 | 32.3% | 98.3% |
| 2026-10-02 | 32.3% | 98.3% |
| 2026-10-01 | 32.3% | 98.3% |
| 2026-09-30 | 32.3% | 98.3% |
| 2026-09-29 | 32.3% | 98.3% |
| 2026-09-27 | 32.3% | 98.3% |
| 2026-09-26 | 32.3% | 98.3% |
| 2026-09-25 | 32.3% | 98.3% |
| 2026-09-24 | 32.3% | 98.3% |
| 2026-09-23 | 40.7% | 98.6% |
| 2026-09-22 | 40.7% | 98.6% |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Learn
Why it happened and what stops it
The weakness (CWE)
How attackers use it (ATT&CK)
Typical for this kind of weakness across CISA KEV exploits (CTID), not specific to this CVE.
How it's exploited
What the attacker gets
Controls that mitigate it (NIST SP 800-53)
- SI-4System MonitoringSystem and Information Integrity · mitigates 9 of these techniques
- CM-6Configuration SettingsConfiguration Management · mitigates 8 of these techniques
- SI-3Malicious Code ProtectionSystem and Information Integrity · mitigates 8 of these techniques
- AC-6Least PrivilegeAccess Control · mitigates 7 of these techniques
- AC-2Account ManagementAccess Control · mitigates 6 of these techniques
- AC-3Access EnforcementAccess Control · mitigates 6 of these techniques
Affected products
- langflow langflow