PT-2026-22107 · Langflow+1 · Langflow+1

Weblover12 · Published 2026-02-26 · Updated 2026-04-24 · CVE-2026-27966

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.8.0

Description Langflow is a tool for building and deploying AI-powered agents and workflows. In the CSV Agent node, the variable allow dangerous code is hardcoded to True, which automatically exposes LangChain's Python REPL tool (python repl ast). This allows an attacker to execute arbitrary Python and operating system commands on the server through prompt injection, leading to full Remote Code Execution (RCE). Additionally, some reports indicate a deserialization flaw in the flow import endpoint where malicious YAML payloads can be used to execute arbitrary code without authentication. Over 3,000 instances have been identified globally.

Recommendations Update to version 1.8.0. Restrict or disable the CSV Agent node in untrusted deployments.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-27966

GHSA-3645-FXCV-HQR4

Affected Products

Langchain

Langflow

References · 24

• 🔥 https://github.com/langflow-ai/langflow/security/advisories/GHSA-3645-fxcv-hqr4 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27966.json · Exploit
• https://github.com/langflow-ai/langflow/commit/d8c6480daa17b2f2af0b5470cdf5c3d28dc9e508 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-27966 · Security Note
• https://osv.dev/vulnerability/GHSA-3645-fxcv-hqr4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-27966 · Vendor Advisory
• https://github.com/langflow-ai/langflow · Note
• https://twitter.com/CveTodo/status/2026850237873053959 · Twitter Post
• https://reddit.com/r/LangChain/comments/1rycurg/psa_two_langgraph_checkpoint_vulnerabilities · Reddit Post
• https://twitter.com/VulmonFeeds/status/2026965305977659709 · Twitter Post
• https://twitter.com/darkeye_team/status/2028410580282081692 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1rge3fn/resumen_diario_de_vulnerabilidades_27022026 · Reddit Post
• https://t.me/CVEtracker/45810 · Telegram Post
• https://twitter.com/ThreatSynop/status/2028457005413740645 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1rgdxmv/resumen_diario_de_vulnerabilidades_27022026 · Reddit Post