CVE-2026-0770 Langflow Langflow
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to…
- CVSS
- 9.8 Critical
- EPSS
- 63%
- Percentile
- 99
- Published
- 2026-01-23
- Force
- 11 of 12
- Public PoC
- 7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
On CISA’s exploited list
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
- Added
- 2026-07-21
- Federal patch deadline
- 2026-07-24
- Ransomware use
- not known