AIKIDO-2026-805851

TL;DR

The /api/v1/validate/code endpoint validates user-supplied Python by executing its function definitions in a restricted scope using exec(). Because Python evaluates decorators when a function definition executes, a request containing a function with a malicious decorator runs arbitrary code during validation. An authenticated user can send such a payload to obtain code execution with the privileges of the Langflow process. The fix compiles the code instead of executing it so decorators are never evaluated.