CVE-2026-0770: Langflow exec_globals RCE Vulnerability
Found by web discovery while looking for coverage of CVE-2026-0770
CVE-2026-0770 is a critical unauthenticated remote code execution vulnerability in Langflow's exec_globals, endangering exposed deployments.
CVE-2026-0770 is a critical remote code execution vulnerability in Langflow, a popular open-source framework for building language model applications. It allows remote attackers to execute arbitrary code on affected installations without authentication, making internet-exposed deployments particularly dangerous. The flaw resides in the exec_globals component; the available disclosure does not state active exploitation or provide patch details.
- Unauthenticated arbitrary code execution on affected installations
- Exposed Langflow deployments are particularly at risk
- CVEs
- CVE-2026-0770
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-0770 | Unauthenticated Remote Code Execution in Langflow validate Endpoint | 9.8 | 63% | KEV | KEV |
From the original article
CVE-2026-0770 is a critical remote code execution vulnerability affecting Langflow, a popular open-source framework for building language model applications. This vulnerability allows remote attackers to execute arbitrary code on affected installations without requiring authentication, making it particularly dangerous for exposed deployments.
sentinelone.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.