Langflow — Vulnerability (CVE-2026-33873)
Date: 2026-03
Affected: langflow/langflow
Attack vector: rce
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2026-33873
CWE: CWE-94
CVSS: 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.9.0, the Agentic Assistant feature in Langflow executes LLM-generated Python code during its validation phase. Although this phase appears intended to validate generated component code, the implementation reaches dynamic execution sinks and instantiates the generated class server-side. In deployments where an attacker can access the Agentic Assistant feature and influence the model output, this can result in arbitrary server-side Python execution. Version 1.9.0 fixes the issue.


Mitigations:

Architectural layers (MAESTRO):