CVE-2026-27966: Langflow has Remote Code Execution in CSV Agent
(updated )
The CSV Agent node in Langflow hardcodes allow_dangerous_code=True, which automatically exposes LangChain’s Python REPL tool (python_repl_ast). As a result, an attacker can execute arbitrary Python and OS commands on the server via prompt injection, leading to full Remote Code Execution (RCE).
References
- github.com/advisories/GHSA-3645-fxcv-hqr4
- github.com/langflow-ai/langflow/commit/d8c6480daa17b2f2af0b5470cdf5c3d28dc9e508
- github.com/langflow-ai/langflow/security/advisories/GHSA-3645-fxcv-hqr4
- github.com/pypa/advisory-database/tree/main/vulns/langflow/PYSEC-2026-376.yaml
- nvd.nist.gov/vuln/detail/CVE-2026-27966
- pypi.org/project/langflow
Code Behaviors & Features
Detect and mitigate CVE-2026-27966 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →