Description
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.
Published: 2026-01-23
Score: 9.8 Critical
EPSS: 56.9% High
KEV: Yes
Impact: n/a
Action: n/a
AI Analysis

Impact

A flaw in how the exec_globals parameter is handled by Langflow's validate endpoint leads to the inclusion of code from an untrusted control sphere. The vulnerability, categorized as CWE-829, permits attackers to run arbitrary commands with root privileges. The flaw requires no authentication, allowing any remote actor to trigger it by crafting a suitable request.

Affected Systems

Langflow version 1.4.2 is affected, as identified by the provided CPE string. No other versions are listed as impacted in the current data.

Risk and Exploitability

The CVSS score of 9.8 indicates a critical risk to confidentiality, integrity, and availability. The EPSS value of 55% indicates a moderate to high likelihood of active exploitation at present. However, the vulnerability is listed in the CISA KEV catalog, signaling that threat actors may target it. Attackers could exploit it by sending an unauthenticated request to the validate endpoint, causing root-level code execution.

Generated by OpenCVE AI on August 4, 2026 at 08:57 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Obtain a newer Langflow release that includes the fix for the exec_globals handling flaw.
  • Restrict access to the validate endpoint by limiting its exposure to trusted networks or requiring authentication.
  • If an update cannot be applied immediately, disable or block the validate endpoint, or implement input‑validation rules that reject arbitrary exec_globals content.
  • Monitor logs for anomalous activity on the validate endpoint and maintain an inventory of all Langflow deployments to ensure timely remediation.

Generated by OpenCVE AI on August 4, 2026 at 08:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-g22f-v6f7-2hrh Langflow affected by Remote Code Execution via validate_code() exec()
History

Tue, 21 Jul 2026 16:30:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 21 Jul 2026 15:00:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2026-07-21T00:00:00+00:00', 'dueDate': '2026-07-24T00:00:00+00:00'}

Wed, 18 Feb 2026 16:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:langflow:langflow:1.4.2:-:*:*:*:*:*:*

Fri, 23 Jan 2026 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 23 Jan 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Langflow
Langflow langflow
Vendors & Products Langflow
Langflow langflow

Fri, 23 Jan 2026 04:00:00 +0000

Type Values Removed Values Added
Description Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.
Title Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
Weaknesses CWE-829
References
Metrics cvssV3_0

{'score': 9.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Langflow Langflow
cve-icon MITRE

Status: PUBLISHED

Assigner: zdi

Published:

Updated: 2026-07-22T03:55:44.396Z

Reserved: 2026-01-08T22:50:23.294Z

Link: CVE-2026-0770

cve-icon Vulnrichment

Updated: 2026-01-23T16:31:30.511Z

cve-icon NVD

Status : Analyzed

Published: 2026-01-23T04:16:04.063

Modified: 2026-07-22T05:17:08.693

Link: CVE-2026-0770

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T09:00:06Z

Weaknesses
  • CWE-829

    Inclusion of Functionality from Untrusted Control Sphere