Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-02-27 · source-backed
Langflow's CSV Agent node hardcodes allow_dangerous_code=True, exposing LangChain's python_repl_ast tool. Attackers inject prompts to execute arbitrary Python and OS commands without authentication. Patched in v1.8.0. This is the same eval() epidemic vulnerability class seen across agent workflow platforms — dangerous code execution shipped as default.
Each link below shares sources, entities, or timing with this story.
Sysdig criticizes Langflow / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Sysdig criticizes Langflow); both cover Attackers, CVSS, Langflow, Python; overlapping topics (arbitrary, attacker, code).
MCP supports LangChain / Shared entities / Shared topic / What happened next
Linked by a graph relationship (MCP supports LangChain); both cover CVE, Python; overlapping topics (agent, arbitrary, command, execution).
MCP supports LangChain / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (MCP supports LangChain); both cover CVE, Patched; overlapping topics (arbitrary, code, command, cvss, execute).
Markitdown uses Python / Shared entity: Langflow / What happened next / Tension
Linked by a graph relationship (Markitdown uses Python); both cover Langflow; picks up the Langflow thread on 2026-07-07.
Shared entities / Shared topic / What happened next
Both cover Attackers, CVE, CVSS, Langflow; overlapping topics (agent, attacker, cvss); picks up the Attackers thread on 2026-07-11.
Sysdig criticizes Langflow / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Sysdig criticizes Langflow); both cover CVE, CVSS, Langflow; overlapping topics (attacker, cvss).
TeamPCP criticizes Langflow / Shared entities / Shared topic / What happened next
Linked by a graph relationship (TeamPCP criticizes Langflow); both cover Attackers, CVE, Langflow; overlapping topics (attacker, code).
LangSmith built by LangChain / Shared entity: LangChain / What happened next
Linked by a graph relationship (LangSmith built by LangChain); both cover LangChain; picks up the LangChain thread on 2026-03-19.