Langflow Smart Transform prompt injection leading to code execution vulnerability
Start here
GitHub 安全公告披露，Langflow 1.3.0 至 1.10.2 的 Smart Transform（LambdaFilterComponent）组件存在代码注入漏洞：该组件把流程作者的指令与输入数据预览拼进提示词，让 LLM 生成 Python lambda，随后仅做语法格式检查就用带完整 builtins 的 eval 执行，并在 Langflow 进程内调用。恶意流程作者可直接通过 Instructions 字段利用；若暴露的流程把攻击者可控内容传入，也可能被利用。1.11.0 与 1.10.3 已修复该漏洞。
Generated by AI from reports · Updated 5 hr ago
Progress timeline
- GitHub 安全公告SelectedLangflow Smart Transform has a prompt injection vulnerability leading to code execution; fixed in 1.11.0 and 1.10.3
Langflow 1.3.0 through 1.10.2 Smart Transform (LambdaFilterComponent) component has a code injection vulnerability. This component concatenates the flow author's instructions and input data preview into the prompt, lets the LLM generate Python lambda, then executes it with eval with full builtins after only a syntax format check, and calls it within the Langflow process. A malicious flow author can exploit it directly through the Instructions field; if an exposed flow passes attacker-controlled content into Smart Transform, it may also be indirectly exploited via prompt injection, depending on whether the model follows the injected instructions. Successful exploitation can obtain Langflow service process permissions, read or modify credentials, files, application data, and network resources, and in shared deployments may affect other tenants.
Related discussion
Attention trend
New sources per day
- Oct 6: 1 new sources (1 outlets, 0 accounts)
- Oct 7: 0 new sources (0 outlets, 0 accounts)
- Oct 8: 0 new sources (0 outlets, 0 accounts)
- Oct 9: 0 new sources (0 outlets, 0 accounts)
- Oct 10: 0 new sources (0 outlets, 0 accounts)
- Oct 11: 0 new sources (0 outlets, 0 accounts)
- Oct 12: 0 new sources (0 outlets, 0 accounts)
- Oct 13: 0 new sources (0 outlets, 0 accounts)
- Oct 14: 0 new sources (0 outlets, 0 accounts)