CVE-2026-0770
Description
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.
In plain language
AI Act nowCVE-2026-0770 is a remote “run code on the server” flaw in Langflow that does not require a login; if your Langflow is reachable from the internet (or from other untrusted networks), you should treat it as an urgent risk.
CVE-2026-0770 is an unauthenticated remote code execution issue in Langflow’s handling of the exec_globals parameter (via the validate endpoint), where attacker-controlled values can cause inclusion of functionality from an untrusted control sphere, enabling code execution as root.
What to do now
- Check whether your Langflow instance is reachable from the internet or any untrusted network (especially the validate endpoint).
- Confirm whether any external system or users can send requests that include the exec_globals parameter to the validate endpoint.
- If it is reachable externally, immediately restrict access using firewall/network rules so only trusted IPs (or your VPN/admin network) can reach Langflow.
- Temporarily disable or block the validate endpoint at the reverse proxy/WAF layer if that endpoint is not required for your business operations.
- Monitor for exploit attempts (unexpected validate requests and unusual exec_globals content) and preserve logs for your vendor/IT team.
- Since no fixed version/patch is available yet, plan to upgrade once the vendor releases one and keep restrictions in place until then.
CVSS Vector Breakdown
AV:NAttack VectorAC:LAttack ComplexityPR:NPrivileges RequiredUI:NUser InteractionS:UScopeC:HConfidentialityI:HIntegrityA:HAvailabilityWeaknesses
Affected Products
Exploitability
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Exploit details including PoC links, Metasploit modules, and scanner templates are available after registration.
View exploit detailsAttack Graph
Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/⌘ + scroll to zoom, or go fullscreen.
MITRE ATT&CK
1 techniqueReferences
- CISA orders feds to patch actively exploited TrueConf Server flawsen-us·BleepingComputer·
- CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flawsen-us·BleepingComputer· Exploited Langflow ai-ml
- Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authenticationen·The Hacker News· Exploited Windmill platform web-app
- CISA orders urgent action on actively exploited Langflow RCE flawen-us·BleepingComputer· Exploited Langflow ai-ml
- CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEVen·The Hacker News· Exploited Adobe ColdFusion web-app
- Path traversal flaw in AI dev platform Langflow exploited in attacksen-us·BleepingComputer· Exploited Langflow MuddyWater (mentioned in context of other Langflow vulns)
- Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCEen·The Hacker News· Exploited Langflow MuddyWater (mentioned as exploiting a different Langflow vuln)
Unlock Complete Vulnerability Intelligence
Get the full picture for CVE-2026-0770 and every CVE in our database. Create a free account — no credit card required.
Create Free Account