Description
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.
Published: 2026-01-23
Score: 9.8 Critical
EPSS: 56.3% High
KEV: Yes
Impact: n/a
Action: n/a
AI Analysis

Impact

A flaw in how the exec_globals parameter is handled by the Langflow validate endpoint allows an attacker to include code from an untrusted control sphere. The omission is classified as CWE‑829 and permits the execution of arbitrary code with root privileges. Because authentication is not required, the attack can be carried out entirely by remotely crafted requests.

Affected Systems

Version 1.4.2 of the Langflow application is affected. No other versions are listed in the provided material.

Risk and Exploitability

The vulnerability scores 9.8 on the CVSS scale, reflecting a critical impact. The EPSS score of 53 % indicates a high likelihood that this flaw will be actively exploited. It was added to the CISA KEV catalog. Attackers can exploit the flaw by sending a specially crafted request to the validate endpoint from an unauthenticated source, gaining root‑level execution on the host.

Generated by OpenCVE AI on July 27, 2026 at 04:45 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to a Langflow release that contains the approved fix for the exec_globals handling flaw.
  • Restrict network reachability to the validate endpoint, allowing only trusted internal networks or enforcing authentication before access.
  • If a patch cannot be applied immediately, disable or firewall off the validate endpoint or apply an input‑validation filter to reject arbitrary exec_globals content.
  • Monitor application logs for abnormal activity on the validate endpoint and maintain an inventory of all Langflow deployments to ensure timely remediation.

Generated by OpenCVE AI on July 27, 2026 at 04:45 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-g22f-v6f7-2hrh Langflow affected by Remote Code Execution via validate_code() exec()
History

Tue, 21 Jul 2026 16:30:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 21 Jul 2026 15:00:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2026-07-21T00:00:00+00:00', 'dueDate': '2026-07-24T00:00:00+00:00'}

Wed, 18 Feb 2026 16:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:langflow:langflow:1.4.2:-:*:*:*:*:*:*

Fri, 23 Jan 2026 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 23 Jan 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Langflow
Langflow langflow
Vendors & Products Langflow
Langflow langflow

Fri, 23 Jan 2026 04:00:00 +0000

Type Values Removed Values Added
Description Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.
Title Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
Weaknesses CWE-829
References
Metrics cvssV3_0

{'score': 9.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Langflow Langflow
cve-icon MITRE

Status: PUBLISHED

Assigner: zdi

Published:

Updated: 2026-07-22T03:55:44.396Z

Reserved: 2026-01-08T22:50:23.294Z

Link: CVE-2026-0770

cve-icon Vulnrichment

Updated: 2026-01-23T16:31:30.511Z

cve-icon NVD

Status : Analyzed

Published: 2026-01-23T04:16:04.063

Modified: 2026-06-17T10:11:21.150

Link: CVE-2026-0770

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-27T05:00:04Z

Weaknesses
  • CWE-829

    Inclusion of Functionality from Untrusted Control Sphere