CVE-2026-0769

CVE-2026-0769 is a critical (CVSS 9.8) unauthenticated remote code execution vulnerability in Langflow, an open-source platform for building LLM applications, located in the eval_custom_component_code function. The function fails to properly validate a user-supplied string before using it to execute Python code, so a remote attacker who can reach the Langflow service without any credentials can submit a crafted string that is then executed as Python code. Successful exploitation yields arbitrary code execution in the context of the current process, with full confidentiality, integrity, and availability impact on the affected host. Any Langflow deployment is potentially exposed, particularly self-hosted or internet-facing instances that accept unauthenticated API requests. Exploitation of critical Langflow flaws has been reported in the wild in recent credential-focused campaigns; this CVE itself is not yet in CISA KEV and has no known public PoC, but its EPSS of 38% (98th percentile) signals high near-term exploitation risk.

What to do: Upgrade Langflow to the patched release identified in the ZDI/Trend Micro advisory (ZDI-CAN-26972) as soon as it is available, since the flaw is fixed by proper validation in updated code. Until patched, restrict unauthenticated network access to Langflow instances — put them behind reverse-proxy authentication, firewall them from the internet, and monitor for signs of compromise such as unexpected child processes or outbound connections spawned by the Langflow service.