CVE-2026-75062 | Google langfun up to 0.1.1 lf.query eval injection

August 26, 2026 Yanac

A vulnerability was found in Google langfun up to 0.1.1. It has been declared as critical. Affected by this issue is some unknown functionality of the component lf.query. The manipulation results in improper neutralization of directives in dynamically evaluated code.

This vulnerability is cataloged as CVE-2026-75062. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More