Langflow CSV Agent RCE via Prompt Injection (CVE-2026-27966)
Date: 2026-02
Affected: Langflow CSV Agent RCE via Prompt Injection (CVE-2026-27966)
Attack vector: prompt-injection
Category: real-world
Severity: Critical
CVE: CVE-2026-27966
CWE: CWE-94
CVSS:  (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

CVSS 9.8. Langflow's CSVAgentComponent hardcodes `allow_dangerous_code=True`, auto-enabling LangChain's Python REPL tool. Attackers inject malicious prompts through user-supplied input, achieving arbitrary Python/OS command execution. No authentication required. Affects versions prior to 1.8.0.


Mitigations:

Architectural layers (MAESTRO):