Description
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Langflow | Langflow | 1.4.2 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Langflow Unauthenticated RCE (validate endpoint)
exploit/multi/http/langflow_rce_cve_2026_0770
Exploit-DB 1
- Langflow 1.3.0 - Remote Code Execution EDB-52597 · webapps · May 29, 2026
GitHub 7 repositories
-
affix/CVE-2026-0770-PoC ★ 7 · Feb 7, 2026
Proof of Concept for CVE-2026-0770 - Langflow Remote Code Execution
-
ashrafzaryouh/CVE-2026-0770 ★ 1 · Apr 3, 2026
CVE-2026-0770
-
0xgh057r3c0n/CVE-2026-0770 ★ 1 · Feb 24, 2026
Langflow Remote Code Execution (RCE) Proof-of-Concept
-
razureink/cve-2026-0770-langflow_rce_reproduction ★ 0 · Jul 23, 2026
CVE Reproduction: cve-2026-0770-langflow_rce_reproduction
-
diamorphine666/CVE-2026-0770 ★ 0 · May 23, 2026
Langflow remote code execution exploit
-
Ez4rd1x1/CVE-2026-0770 ★ 0 · May 15, 2026
LangFlow RCE | CVE-2026-0770 | Proof-Of-Concept
-
Yetazyyy/CVE-2026-0770 ★ 0 · Mar 8, 2026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Langflow < 1.3.0 - Remote Code Execution via validate_code() exec() http/cves/2026/CVE-2026-0770.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | langflow | <= 1.7.3 | — | GHSA-g22f-v6f7-2hrh |