Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.9.0, the Agentic Assistant feature in Langflow executes LLM-generated Python code during its validation phase. Although this phase appears intended to validate generated component code, the implementation reaches dynamic execution sinks and instantiates the generated class server-side. In deployments where an attacker can access the Agentic Assistant feature and influence the model output, this can result in arbitrary server-side Python execution. Version 1.9.0 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-27 | 2 | Disclosure2 |
| 2026-03-28 | 1 | General1 |
CVE-2026-33873 Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.9.0, the Agentic Assistant feature in Langflow executes LLM-generate… https://www.cve.org/CVERecord?id=CVE-2026-33873
Post summary
The entry notes CVE-2026-33873 relating to a pre‑1.9.0 feature in Langflow, but provides no concrete technical detail, evidence of exploitation, or mitigation guidance.
🚨 CVE-2026-33873: Langflow has Authenticated Code ... LLM prompt injection meets server-side RCE - attackers can manipulate AI output to execute arbitrary Python during "val... https://zerodaysignal.com/vulnerability/CVE-2026-33873 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
Langflow’s CVE‑2026‑33873 allows authenticated users to inject prompts that trigger server‑side RCE, enabling arbitrary Python execution, with no active exploitation or patch reported so far.
An authenticated code execution vulnerability in `Langflow` (CVE-2026-33873) may allow arbitrary code execution via Agentic Assistant Validation. Organizations should review access controls and monitor for updates. #AppSec #CodeExecution #Langflow https://www.pulsepatch.io/posts/cve-2026-33873-langflow-authenticated-code-execution
Post summary
The post announces an authenticated code‑execution vulnerability in Langflow, urging organizations to review controls and watch for vendor updates.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | langflow | langflow | - | - | - |