CVE-2026-0770 — Vulnerability in langflow — CVE Details

HIGH

Langflow affected by Remote Code Execution via validate_code() exec()

Published January 23, 2026Updated July 7, 2026Source: osv

Summary

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.

Advisory Timeline

First published January 23, 2026 (262 days ago).
Last revised July 7, 2026 — 165 days after initial publication.

Affected Packages (1)

Affects 1 ecosystem: pypi (1).

Package	Ecosystem	Affected	Fixed In
langflow	pypi	0.0.31, 0.0.32, 0.0.33, 0.0.40 (+276 more)	Range-based data available

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-829
View on MITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.8 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

—

Confidentiality

—

Integrity

—

Availability

—

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

References

Frequently Asked Questions

What is CVE-2026-0770?: Langflow affected by Remote Code Execution via validate_code() exec() This vulnerability has been assigned a severity rating of HIGH (CVSS score: 9.8/10).
How do I check if my project is affected by CVE-2026-0770?: CVE-2026-0770 affects langflow. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2026-0770 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

9.8

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-g22f-v6f7-2hrh

PYSEC-2026-1525

Related CVEs

CVE-2026-55255
CRITICAL
CVE-2026-48519
CRITICAL
CVE-2024-48061
CRITICAL
Langflow vulnerable to remote code execution
CVE-2026-21445
CRITICAL
Langflow Missing Authentication on Critical API Endpoints
CVE-2026-33873
CRITICAL
Langflow has Authenticated Code Execution in Agentic Assistant Validation
CVE-2026-33017
CRITICAL
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint
CVE-2026-105697
CRITICAL
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
CVE-2026-55450
CRITICAL
Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies