The vulnerability resides in the eval function of the file src/lfx/src/lfx/components/llm_operations/lambda_filter.py within the LambdaFilterComponent of Langflow. An attacker who manipulates the input payload can cause the eval operation to execute arbitrary Python code, potentially compromising the hosting system. This flaw is a classic code injection weakness described by CWE-74 and CWE-94, permitting malicious expressions to be injected and run. The attack may be performed remotely and an exploit has been made publicly available, making the vulnerability actionable for attackers.

The affected product is Langflow, developed by langflow-ai, with vulnerable releases up to and including version 1.10.2. Users deploying any version of Langflow <= 1.10.2 are at risk; no information is provided about fixes in later releases.

The CVSS score of 5.3 indicates moderate severity. The EPSS score of < 1% reflects a low probability of exploitation, and the vulnerability is not listed in CISA’s KEV catalog, yet the public availability of an exploit and the fact that it can be triggered remotely raise the practical risk. The likely attack vector is remote, with an attacker sending carefully crafted payloads to the LambdaFilterComponent over the network. No specific environmental conditions are noted beyond the presence of the vulnerable component.