9.8

CVE-2026-0770: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

CVSS: 9.8v3.0CriticalKEVAnalyzed
AliasesGHSA-g22f-v6f7-2hrhPYSEC-2026-1525
Published 23-01-2026Last modified 22-07-2026
Open JSON

Vulnerability summary

CVE-2026-0770 is a critical (CVSS 9.8) vulnerability in Langflow. It is known to be exploited: CISA lists it, first on 21-07-2026. EPSS estimates a 62.56% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk
85/100
0100
Critical · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.0 (CVE.org)
EPSS score
62.56%
0%100%
Critical · -1.28 pp in 30 days
KEVListedCISA
RansomwareNone recordedNo known use recorded
Public exploits2metasploit, exploit-database

Timeline

  1. 23-01-2026
    PublishedVulnerability first disclosed.
  2. 21-07-2026
    Added to CISA KEVLangflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
  3. 22-07-2026
    Last modifiedVulnerability information updated.
  4. 24-07-2026
    CISA remediation dueApply mitigations per vendor instructions.

Description

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.

CVSS metrics

3 scores · 3 sources · 2 versions

EPSS trend

Probability

62.56%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

-1.28 pp

From 63.84% on 21-09-2026

21-09-202621-10-2026
EPSS score
62.56%

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
21-07-2026
Federal due date
24-07-2026

CISA required action

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. github.com/langflow-ai/langflow/releases/tag/v1.9.0 nvd.nist.gov/vuln/detail/CVE-2026-0770

Public exploits

2 found
  • MetasploitMetasploitremoteUnverified

    Langflow Unauthenticated RCE (validate endpoint)

    exploit/multi/http/langflow_rce_cve_2026_0770

    Maturity: poc

  • exploit-databasemultipleUnverified

    Langflow 1.3.0 - Remote Code Execution

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Langflow1 product
PyPI1 product
  • langflow≤ 1.7.3

2 vendors · 2 products

References

8 links