{"action":"Upgrade langflow to 1.10.1 or later.","affected":[{"fixed":"1.10.1","introduced":"0"}],"component":"langflow","cve_ids":["CVE-2026-10561"],"ecosystem":"PyPI","epss":0.0082,"exploited":false,"fixed_versions":["1.10.1"],"ghsa_id":"GHSA-8qpj-27x8-pwpq","id":"tcs_01M5KF8WMREXQDQ4N4C5FFMJXC","modified_at":"2026-10-15T14:56:15.267276812Z","published_at":"2026-10-06T13:38:28Z","references":["https://osv.dev/vulnerability/GHSA-8qpj-27x8-pwpq","https://github.com/langflow-ai/langflow/security/advisories/GHSA-8qpj-27x8-pwpq","https://nvd.nist.gov/vuln/detail/CVE-2026-10561","https://github.com/langflow-ai/langflow/pull/13700","https://github.com/langflow-ai/langflow/commit/2754c84aad1306f463db1c3bbb3e8ffbe85da77d","https://github.com/langflow-ai/langflow","https://github.com/langflow-ai/langflow/releases/tag/v1.10.1","https://www.ibm.com/support/pages/node/7277242"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-8qpj-27x8-pwpq","url":"https://osv.dev/vulnerability/GHSA-8qpj-27x8-pwpq"}],"summary":"Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation"}