CVE-2026-27966: Langflow Remote Code Execution Vulnerability in CSV Agent
Summary
CVE-2026-27966: Langflow has Remote Code Execution in CSV Agent. Affects langflow versions < 1.8.0rc2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Langflow is an open-source framework that allows users to build applications using language models (LLMs) for various tasks such as querying, summarizing, or manipulating data. The CSV Agent is a component within Langflow that interacts with CSV files, enabling users to perform operations on the data using LLMs. However, a critical vulnerability exists in the CSV Agent that exposes the system to remote code execution (RCE) due to a hardcoded configuration.
Vulnerability Detail
The vulnerability arises from the CSV Agent's hardcoded setting of 'allow_dangerous_code=True', which enables the execution of arbitrary Python code through the LangChain's Python REPL tool. This flaw allows an attacker to inject malicious commands via prompt injection, leading to full remote code execution on the server. The absence of a configuration option to disable this behavior significantly increases the risk of exploitation, potentially allowing attackers to take complete control of the server environment.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using the CSV Agent until a patch is applied. If the functionality is essential, ensure that the environment is secured and monitored for any unauthorized access or command execution.
Conclusion
The Langflow CSV Agent vulnerability (CVE-2026-27966) poses a significant risk due to its potential for remote code execution. Users are strongly advised to update to the latest patched version of the package and to implement security measures to protect their environments until a fix is applied.
See every vulnerability recorded for langflow →
FAQ
The CVSS score for this vulnerability is 9.8, indicating a critical level of severity.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The vulnerability allows remote attackers to execute arbitrary Python code and system commands, potentially leading to a full takeover of the server environment.
Currently, there is no configuration option available to disable this feature in the affected versions of Langflow.
If an immediate update is not possible, consider implementing strict access controls and monitoring to mitigate the risk of exploitation.
References
Related vulnerabilities
Recent vulnerabilities recorded for langflow.
