CVE-2026-0770

CRITICAL9.8

CISA KEV

Published 2026-01-23 · Updated 2026-07-22 · Source zdi-disclosures@trendmicro.com

Summary

CVE-2026-0770 is a critical-severity (CVSS 9.8) vulnerability in Langflow Langflow. CISA added it to the Known Exploited Vulnerabilities catalog on July 21, 2026, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by July 24, 2026. CISA does not currently list it as used in ransomware campaigns. Langflow has 5 vulnerabilities in the KEV catalog, 1 of them linked to ransomware.

All 5 known-exploited Langflow vulnerabilities →

Description

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.

CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-829

CISA Known-Exploited Vulnerability

Product: Langflow — Langflow

Name: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Date added: 2026-07-21 · Due: 2026-07-24

Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

References

View on NVD

More exploited Langflow vulnerabilities

Most recently added to CISA KEV

CVE-2026-55255
Langflow — Langflow Authorization Bypass Through User-Controlled Key Vulnerability
added 2026-07-07
CVE-2025-34291
Langflow — Langflow Origin Validation Error Vulnerability
added 2026-05-21
CVE-2026-33017
Langflow — Langflow Code Injection Vulnerability
added 2026-03-25
CVE-2025-3248
RANSOMWARE
Langflow — Langflow Missing Authentication Vulnerability
added 2025-05-05

View all →

Related CVEs

Same severity, most recent

CVE-2026-113703
SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where enforce_authentication() in api_service/auth/middleware.py trusts the client-controlled request.remote_addr value, which is derived from the spoofable X-Forwarded-For header due to ProxyFix(x_for=1) configuration in api_service/app.py. Attackers can send a request with X-Forwarded-For set to a trusted CIDR address such as 127.0.0.1 to be granted an unauthenticated admin session via _load_bypass_user_context(), gaining full administrative access to endpoints like /api/users and /api/jobs without providing any credentials.
2026-10-20 · score 9.3
CVE-2026-113678
Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authenticated customers to take ownership of arbitrary host directories by abusing the root-run traffic cron. Attackers can replace the goaccess statistics directory in their document root with a symlink, causing chown -R to hand root-owned trees to them and enabling root escalation.
2026-10-20 · score 9.9
CVE-2026-103119
Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second. This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26. Users are recommended to upgrade to version 11.0.27, which fixes the issue.
2026-10-20 · score 9.1
CVE-2026-113620
In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not verify the bearer JWT. The payload is decoded and its groups or roles are used as RBAC subjects. A self-minted token whose groups contain admin matches the built-in admin role, with no account and no RoleBinding. The attacker can open an exec or log session for a microservice or fog whose UUID they already know. HTTP routes are not affected: they verify the token before RBAC. Agent WebSockets verify the fog token and are not affected.
2026-10-20 · score 9.8
CVE-2026-113391
A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file /cgi-bin/mainfunction.cgi of the component Upload Endpoint. Such manipulation leads to command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.7 is able to mitigate this issue. It is recommended to upgrade the affected component. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer.
2026-10-20 · score 9.9