CVE-2026-27966

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

March 3, 2026

Last Seen

March 3, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Langflow AI CSV Agent Vulnerability Enables Remote Code Execution51.6

A security researcher disclosed a vulnerability (GHSA-3645-fxcv-hqr4) in the Langflow package on PyPI, which allows remote code execution attacks. The flaw specifically affects the CSV agent functionality within the open-source Langflow AI framework. Users of this package are advised to review their...