VULNERABILITY INTELLIGENCE
CVE-2026-33873
CVSS score9.9 CRITICAL
EPSS probability1.45%
CISA KEVNot currently listed
Published2026-03-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.9.0, the Agentic Assistant feature in Langflow executes LLM-generated Python code during its validation phase. Although this phase appears intended to validate generated component code, the implementation reaches dynamic execution sinks and instantiates the generated class server-side. In deployments where an attacker can access the Agentic Assistant feature and influence the model output, this can result in arbitrary server-side Python execution. Version 1.9.0 fixes the issue.
Weakness classification
- security-advisories@github.com: CWE-94
Primary references
- security-advisories@github.com — Product
- security-advisories@github.com — Product
- security-advisories@github.com — Product
- security-advisories@github.com — Product
- security-advisories@github.com — Product
- security-advisories@github.com — Product
- security-advisories@github.com — Product
- security-advisories@github.com — Product
- security-advisories@github.com — Product
- security-advisories@github.com — Product
- security-advisories@github.com — Product
- security-advisories@github.com — Product