CVE-2026-0770 - PatchNow

📋 Vulnerability Details

Data Source: CIRCL

Confidence: HIGH

Exploitation Method: DIRECT_NETWORK

CVE Published: 2026-01-23

Added to CISA KEV: 2026-07-21 179 DAYS BETWEEN CVE AND KEV

🎯 Recommendations:

CRITICAL: Check for indicators of compromise - this vulnerability is in CISA KEV indicating active exploitation in the wild. Review logs for requests to the /validate endpoint, inspect for unexpected process execution, unauthorized outbound connections, new user accounts, and verify system/container integrity.
Immediately upgrade Langflow to the latest patched version (above 1.4.2). Prioritize any internet-facing instances first.
For instances that cannot be immediately patched, restrict access to the Langflow web interface behind a VPN, firewall, or reverse proxy with strict ACLs; block external access to /validate.
Monitor for anomalous code execution, reverse shells, and lateral movement from Langflow hosts; rotate any credentials or secrets that were accessible to the Langflow process.
Patch priority: EMERGENCY / P1 — unauthenticated RCE, actively exploited, KEV-listed.

🔍 Web Intelligence (Kagi · 2026-09-14)

Summary

CVE-2026-0770 is a critical remote code execution (RCE) vulnerability affecting Langflow, an open-source framework used for building AI-driven workflows and agents ^[1]^[4]. The flaw resides in the application's `validate_code()` function, specifically within the `/validate` endpoint, where user-supplied input can influence the `exec_globals` parameter ^[2]. This allows unauthenticated remote attackers to inject and execute arbitrary code on the underlying system, representing a severe security risk for any internet-facing deployment ^[1]^[3].

Exploitation

Active Exploitation: The vulnerability is actively targeted by threat actors due to its ease of exploitation and critical severity.
Proof-of-Concept: Publicly available exploit scripts and proof-of-concept (PoC) code are readily accessible on platforms like GitHub, facilitating rapid weaponization ^[2]^[5].
Attack Prerequisites:

- Authentication: None required; the attack is unauthenticated ^[1]. - Interaction: No user interaction is required for successful exploitation. - Vector: Remote, over the network.

Affected Products & Patches

Affected Versions: Langflow version 1.4.2 and all prior builds are known to be vulnerable ^[2].
Patch Availability: Users should update to the latest patched version of Langflow immediately to remediate this vulnerability.
Mitigations/Workarounds: For instances that cannot be immediately updated, organizations should restrict access to the Langflow web interface by placing it behind a VPN, firewall, or reverse proxy with strict access control lists (ACLs) to prevent unauthorized remote requests to the `/validate` endpoint.

Impact

Capability: Successful exploitation grants the attacker the ability to execute arbitrary commands with the privileges of the user running the Langflow application, which in many misconfigured environments can result in full root or system-level compromise ^[1].
Business Risk: Internet-facing deployments are at extreme risk of complete system takeover, data exfiltration, lateral movement within the network, and the deployment of ransomware or other malicious payloads.

Sources

CVE-2026-0770: Langflow exec_globals RCE Vulnerability - SentinelOne
CVE-2026-0770 Overview CVE-2026-0770 is a critical remote code execution vulnerability affecting Langflow, a popular open-source framework for building language model applications. This vulnerability allows remote attackers to execute arbitrary code on affected installations without requiring authen…
GitHub - 0xBlackash/CVE-2026-0770: CVE-2026-0770
CVE-2026-0770 is a critical unauthenticated remote code execution (RCE) vulnerability affecting Langflow 1.4.2 and earlier affected builds. The flaw exists in the /validate endpoint, where the exec_globals parameter can be influenced by untrusted input.
NVD-CVE-2026-0770 - National Vulnerability Database
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to ... Incident Response Assistance and Non-NVD Related Technical Cyber Security Questions: US-CERT Security Operations Center Email: soc@us-cert.gov Phone: 1-88…
Langflow AI Untrusted Control Sphere RCE - CVE-2026-0770 - SonicWall
RCE (CVE-2026-0770) OVERVIEW The SonicWall Capture Labs threat research team became aware of an unauthenticated remote code execution vulnerability in Langflow AI, assessed its impact and developed mitigation measures. Langflow AI is a Python-based web application that provides a visual interface to…
Proof of Concept for CVE-2026-0770 - Langflow Remote ...
CVE-2026-0770 - Langflow Remote Code Execution Summary Langflow contains a critical remote code execution vulnerability in the validate_code() function … ...

🔴 CVE-2026-0770