{"action":"Upgrade langflow to 1.10.3 or later.","affected":[{"fixed":"1.10.3","introduced":"1.3.0"}],"component":"langflow","cve_ids":["CVE-2026-7700"],"ecosystem":"PyPI","epss":0.00314,"exploited":false,"fixed_versions":["1.10.3"],"ghsa_id":"GHSA-9fpm-3445-2vx4","id":"tcs_01M5KFAQGQRX1JMFYZQ3CH3J0C","modified_at":"2026-10-15T14:55:44.304926081Z","published_at":"2026-10-05T22:30:41Z","references":["https://osv.dev/vulnerability/GHSA-9fpm-3445-2vx4","https://github.com/langflow-ai/langflow/security/advisories/GHSA-9fpm-3445-2vx4","https://nvd.nist.gov/vuln/detail/CVE-2026-7700","https://github.com/langflow-ai/langflow/pull/13530","https://github.com/langflow-ai/langflow/commit/1641b28f33e2c47b9a0c6855922d44d1b8418b9d","https://github.com/langflow-ai/langflow/commit/94859df33acd70b2a1f816e26d68f5e89a7e5639","https://github.com/langflow-ai/langflow","https://github.com/langflow-ai/langflow/releases/tag/v1.10.3","https://vuldb.com/submit/804305","https://vuldb.com/vuln/360869","https://www.yuque.com/mengnanbulalei/ognlsk/hte2a98ro5gf8tp9?singleDoc#%20%E3%80%8AFirst%20release%20of%20Langflow%201.8.3%20Smart%20Transform%20eval()/Lambda%20injection%20RCE%20vulnerability%20analysis+POC%E3%80%8B"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-9fpm-3445-2vx4","url":"https://osv.dev/vulnerability/GHSA-9fpm-3445-2vx4"}],"summary":"Langflow: Prompt injection in Langflow Smart Transform can lead to code execution"}