CVE-2026-27966 - Vulnerability Analysis

Overview

Langflow < 1.8.0 contains a remote code execution caused by hardcoded allow_dangerous_code=True exposing LangChain's python_repl_ast tool, letting attackers execute arbitrary Python and OS commands via prompt injection.

Severity & Score

Impact

Attackers can execute arbitrary Python and OS commands on the server, leading to full remote code execution and system compromise.

Mitigation

Update to version 1.8.0 or later.

References

• https://github.com/langflow-ai/langflow/commit/d8c6480daa17b2f2af0b5470cdf5c3d28dc9e508
• https://github.com/langflow-ai/langflow/security/advisories/GHSA-3645-fxcv-hqr4

Social Media Activity(1 post)

Metasploit

@metasploit

Apr 24, 2026

The latest Metasploit Weekly Wrapup is here! Highlights include a new RCE exploit for Langflow (CVE-2026-27966), improved check method visibility with detailed reasoning, and updates for legacy SMB targets. Plus 3 other new modules! Read more: https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-04-25-2026/

View original post

GitHub Repositories(1 repo)

• https://github.com/Anon-Cyber-Team/CVE-2026-27966--RCE-in-Langflow

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner