Langflow Remote Code Execution Vulnerability Exploited in Attacks (CVE-2026-0768)
Critical CVSS 9.8 RCE CVE-2026-0768 in Langflow is under active exploitation, with attackers probing for credentials and secrets.
CVE-2026-0768, a critical (CVSS 9.8) remote code execution flaw in Langflow's code validator, lets attackers execute Python code with root privileges via the validate endpoint's code parameter. VulnCheck honeypots in the UK detected Russian-origin exploitation performing reconnaissance and credential harvesting, querying environment variables like LANGFLOW_SUPERUSER and AWS keys and reading Langflow's secret key. Versions before 1.4.2 are affected; no vendor advisory or public PoC was available at reporting time.
- Flaw in validate endpoint's code parameter enables root-privilege code execution
- VulnCheck observed recon and credential harvesting on UK honeypots, mostly Russian-origin
- Fourth exploited Langflow vulnerability in 2026 after CVE-2026-33017, CVE-2026-5027, CVE-2026-55255
- No public PoC known and no vendor advisory at time of writing
- Qualys detection QID 735263 available for vulnerable assets
- Vendors
- LangflowTrend MicroQualys
- Products
- Langflow
- Organizations
- VulnCheckZero Day Initiative
- Countries
- United KingdomRussia
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-0768 | Langflow code Code Injection Remote Code Execution Vulnerability | 9.8 | 2% | ||
| CVE-2026-33017 | Unauthenticated RCE in Langflow AI Workflow Builder | 9.3 | 96% | KEVPoC ×6 | KEV |
| CVE-2026-5027 | Authenticated Path Traversal Arbitrary File Write in Langflow Files API | 8.8 | 36% | ||
| CVE-2026-55255 | IDOR Authorization Bypass in Langflow Lets Attackers Run Other Users' Flows | 8.4 | <1% | KEVPoC | KEV |
From the original article
1 min read at threatprotect.qualys.comA vulnerability impacting Langflow is being exploited in the wild. Tracked as CVE-2026-0768, the vulnerability has a critical severity rating with a CVSS score of 9. 8.
By Diksha Ojha · threatprotect.qualys.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.