CVE-2026-0770: Langflow Remote Code Execution Vulnerability via validate_code() exec()
Summary
CVE-2026-0770: Langflow affected by Remote Code Execution via validate_code() exec(). Affects langflow versions < 1.7.3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Langflow is a Python-based framework designed to facilitate the development and deployment of machine learning workflows. It provides a user-friendly interface for integrating various components of machine learning systems, enabling developers to streamline their processes. However, Langflow is susceptible to a critical vulnerability that allows unauthorized remote code execution, posing significant security risks to its users.
Vulnerability Detail
The vulnerability arises from the handling of the exec_globals parameter in the validate endpoint of Langflow. This flaw allows an attacker to include resources from an untrusted control sphere, leading to the execution of arbitrary code in the context of the application. Since authentication is not required to exploit this vulnerability, it can be easily leveraged by remote attackers, potentially resulting in severe consequences such as unauthorized access to sensitive data or complete system compromise.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can restrict access to the validate endpoint or implement input validation to sanitize the exec_globals parameter, thereby mitigating the risk of remote code execution until an update can be applied.
Conclusion
The CVE-2026-0770 vulnerability in Langflow presents a serious risk due to its potential for remote code execution without authentication. Users are strongly advised to update to the latest version to mitigate this risk. Temporary workarounds can also be employed while awaiting the update.
See every vulnerability recorded for langflow →
FAQ
CVE-2026-0770 is a security vulnerability in Langflow that allows remote code execution through improper handling of the exec_globals parameter.
If you are using Langflow version 1.7.3 or earlier, your installation is vulnerable. You can also use the Vulert playground to check for vulnerabilities without signing up.
Exploitation of this vulnerability can lead to unauthorized access, data breaches, and complete control over the affected system.
No, authentication is not required, making it easier for attackers to exploit the vulnerability.
Implement input validation and restrict access to the validate endpoint as a temporary measure until you can apply the update.
Related vulnerabilities
Recent vulnerabilities recorded for langflow.
