ZDI-26-037: (0Day) Langflow PythonFunction Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Attack vectors and exploitability will vary depending on the configuration of the product. The specific flaw exists within the handling of Python function components. Depending upon product configuration, an attacker may be able to introduce custom Python code into a workflow. An attacker can leverage this vulnerability to execute code in the context of the application.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Attack vectors and exploitability will vary depending on the configuration of the product. The ZDI has assigned a CVSS rating of 7.1. The following CVEs are assigned: CVE-2026-0771.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-26-037?
The severity of ZDI-26-037 is categorized as a critical remote code execution vulnerability.
How can I mitigate ZDI-26-037?
Mitigation for ZDI-26-037 includes updating Langflow to the latest version where the vulnerability is patched.
What are the potential implications of exploiting ZDI-26-037?
Exploiting ZDI-26-037 allows attackers to execute arbitrary code on affected Langflow installations, potentially leading to full system compromise.
Which versions of Langflow are affected by ZDI-26-037?
ZDI-26-037 affects all versions of Langflow that are improperly configured or not updated.
Is there a workaround for ZDI-26-037?
Currently, there are no known effective workarounds for ZDI-26-037 other than updating to the patched version.