CVE-2026-0770: Langflow Remote Code Execution Vulnerability via validate_code() exec()
Summary
CVE-2026-0770: Langflow affected by Remote Code Execution via validate_code() exec(). Affects langflow versions < 1.7.3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Langflow is an open-source framework designed for building and deploying machine learning applications. It provides a user-friendly interface and integrates various machine learning libraries, enabling developers to streamline their workflows. However, a critical vulnerability has been identified that allows remote code execution, posing significant security risks to installations of Langflow.
Vulnerability Detail
The vulnerability, identified as CVE-2026-0770, arises from the handling of the exec_globals parameter in the validate endpoint of Langflow. This flaw allows remote attackers to execute arbitrary code on affected installations without requiring authentication. The root cause is the inclusion of resources from an untrusted control sphere, which can lead to severe consequences, including unauthorized access to sensitive data and system compromise. The CVSS score for this vulnerability is 8.9, indicating a high severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users should avoid using the validate endpoint until the package is updated. Additionally, implementing strict input validation and sanitization for the exec_globals parameter can help reduce the risk of exploitation.
Conclusion
CVE-2026-0770 is a critical vulnerability in Langflow that allows remote code execution due to improper handling of the exec_globals parameter. Users are strongly advised to update to the latest version to mitigate risks. For those unable to update immediately, implementing workarounds can help reduce exposure to this vulnerability.
See every vulnerability recorded for langflow →
FAQ
CVE-2026-0770 is a vulnerability in Langflow that allows remote code execution through improper handling of the exec_globals parameter.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors and alerts for open-source vulnerabilities.
No, authentication is not required to exploit CVE-2026-0770, making it particularly dangerous.
If an immediate update is not possible, refrain from using the validate endpoint and implement strict input validation as a temporary measure.
Exploitation of this vulnerability could lead to unauthorized code execution, data breaches, and complete system compromise.
Related vulnerabilities
Recent vulnerabilities recorded for langflow.
