CVE-2026-0770

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

Published Jan 23, 2026 CVSS 3.0 · 9.8 Critical EPSS 62.6% KEV · Listed

Description

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.

Analysis

Technical impact

A flaw in how the exec_globals parameter is handled by Langflow's validate endpoint leads to the inclusion of code from an untrusted control sphere. The vulnerability, categorized as CWE-829, permits attackers to run arbitrary commands with root privileges. The flaw requires no authentication, allowing any remote actor to trigger it by crafting a suitable request.

Affected Systems

Langflow installations are affected, as identified by the provided CPE string. No specific version information is available in the CVE payload.

Risk and Exploitability

The CVSS score of 9.8 indicates a critical risk to confidentiality, integrity, and availability. The EPSS value of 63% indicates a moderate to high likelihood of active exploitation at present. However, the vulnerability is listed in the CISA KEV catalog, signaling that threat actors may target it. Attackers could exploit it by sending an unauthenticated request to the validate endpoint, causing root-level code execution.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Langflow

unknown

Version	Status	Constraints
`1.4.2`	affected	—

Configuration 1 [-]

cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*

No data.

Vendor	Product	Versions
Langflow	Langflow	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Obtain a newer Langflow release that includes the fix for the exec_globals handling flaw.
Restrict access to the validate endpoint by limiting its exposure to trusted networks or requiring authentication.
If an update cannot be applied immediately, disable or block the validate endpoint, or implement input‑validation rules that reject arbitrary exec_globals content.
Monitor logs for anomalous activity on the validate endpoint and maintain an inventory of all Langflow deployments to ensure timely remediation.

Generated by OpenCVE AI on August 22, 2026 at 14:50 UTC.

Tracking

Advisories

Source	ID	Title
Github GHSA	GHSA-g22f-v6f7-2hrh	Langflow affected by Remote Code Execution via validate_code() exec()

Metrics

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v2

This CVE is in the KEV database since July 21, 2026.

Exploit prediction score: 62.6% (62.562% probability within 30 days)

Exploitation active

Automatable yes

Technical Impact total

References

Link	Providers
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0770
https://www.zerodayinitiative.com/advisories/ZDI-26-036/

History

Jul 21, 2026 4:30 PM Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
References		https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0770
Metrics	ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`	ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Jul 21, 2026 3:00 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		kev `{'dateAdded': '2026-07-21T00:00:00+00:00', 'dueDate': '2026-07-24T00:00:00+00:00'}`

Feb 18, 2026 4:45 PM Affected versions updated View changes

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:langflow:langflow:1.4.2:-::::::

Jan 23, 2026 5:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Jan 23, 2026 4:45 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Langflow Langflow langflow
Vendors & Products		Langflow Langflow langflow

Jan 23, 2026 4:00 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.
Title		Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
Weaknesses		CWE-829
References		https://www.zerodayinitiative.com/advisories/ZDI-26-036/
Metrics		cvssV3_0 `{'score': 9.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`