Langflow’s eval_custom_component_code function lacks proper validation of user‑supplied strings, allowing arbitrary Python code to be executed. This results in a remote code execution vulnerability classified under CWE-95. An attacker can run any code within the process context without needing authentication, exposing the system to complete compromise of confidentiality, integrity, and availability.

Affected installations include Langflow 1.3.2, which is listed as the affected version in the advisory. It is inferred that later releases may also be vulnerable because the description does not declare a fixed version, but this has not been explicitly confirmed.

The CVSS score of 9.8 indicates critical severity, and the EPSS score of 34% indicates a relatively higher likelihood of exploitation. The flaw is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is remote access to the component creation or configuration endpoint, but no authentication is required, making the attack straightforward for remote adversaries.