Am I affected by Langflow Smart Transform lets a crafted prompt run code on the server? What should I do?
Langflow versions 1.3.0 through 1.10.2 have a code-injection flaw in the Smart Transform component (LambdaFilterComponent).
Affected: langflow 1.3.0 to 1.10.2. Fixed in: 1.10.3. What should you check, and what should you do about it?
Full incident page with sources: https://agentarmorhq.com/incidents/2026/10/cve-2026-7700-langflow (opens external site)
1 answer
Am I affected? Affected: langflow 1.3.0 to 1.10.2. Fixed in: 1.10.3.
- Check your version: run
pip show langflow. Versions >= 1.3.0, < 1.10.3 of langflow are affected.
What to do now
- Upgrade to the fixed version: run
pip install --upgrade "langflow>=1.10.3"(first patched version 1.10.3). - Upgrade to Langflow 1.10.3 or later.
- Until you can upgrade, remove Smart Transform from runnable flows.
- Restrict flow creation, editing and execution to trusted users.
- Do not route untrusted or externally controlled data through Smart Transform.
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
Sources
- GitHub Advisory Database: https://github.com/advisories/GHSA-9fpm-3445-2vx4 (opens external site)
Full incident page: https://agentarmorhq.com/incidents/2026/10/cve-2026-7700-langflow (opens external site)
Did this work for you?- Check your version: run