CVE-2026-27966: exploitation status and patch state

CVE-2026-27966 · CVSS 9.8 CRITICAL · EPSS 34%

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.8.0, the CSV Agent node in Langflow hardcodes `allow_dangerous_code=True`, which automatically exposes LangChain’s Python REPL tool (`python_repl_ast`). As a result, an attacker can execute arbitrary Python and OS commands on the server via prompt injection, leading to full Remote Code Execution (RCE). Version 1.8.0 fixes the issue.

Is CVE-2026-27966 exploited?

• Not in the CISA KEV catalog.
• EPSS puts exploitation in the next 30 days at 34%.
• Public exploit code: packaged in a public tool.

Which products and versions are affected?

No affected package list recorded here yet.

Is there a patch?

No patch identifier recorded here yet.

What PlainSec published about CVE-2026-27966

• Metasploit Makes Langflow Exploitation Easy to Verify (2026-04-25)

Primary sources

• NVD record
• Metasploit: exploit/multi/http/langflow_rce_cve_2026_27966

What this record does not say

• No affected package data.
• No patch identifier.

KEV and EPSS are re-checked daily. Record last updated 2026-08-11.