{"id":"CVE-2026-0768","published":"2026-01-23T03:28:43Z","modified":"2026-02-26T14:44:27Z","title":"Langflow code Code Injection Remote Code Execution Vulnerability","vendor":"Langflow","product":"Langflow","tier":"core","eol":null,"affectedVersions":[{"vendor":"Langflow","product":"Langflow","versions":["1.4.2"]}],"description":{"text":"Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the code parameter provided to the validate endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-27322.","provenance":"source","from":"CVE.org"},"summary":{"text":"Langflow contains a code injection flaw in the handling of the code parameter sent to its validate endpoint, where a user-supplied string is passed to Python execution without proper validation. An remote attacker who can reach the Langflow service can exploit it without authentication or user interaction to run arbitrary code with root privileges.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:53:49Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.2805,"percentile":0.98101,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-08-29","exploitedFirstSeen":"2026-08-29","ransomware":false,"evidence":[{"url":"https://www.linkedin.com/posts/ccondon_new-kev-a-few-hours-ago-vulncheck-canaries-share-7499493655918018560-_b7R/","date":"2026-08-29"},{"url":"https://previdian.com/CVE-2026-0768","date":"2026-08-30"},{"url":"https://www.f5.com/labs/articles/attackers-target-ai-development-platform-langflow","date":"2026-10-06"}],"evidenceTotal":3,"provenance":"source"},"exploited":true,"otx":{"pulseCount":13,"pulses":[{"name":"Attackers Target AI Development Platform Langflow","url":"https://otx.alienvault.com/pulse/6ac71ccaf3871c21505cc54c","created":"2026-10-08"},{"name":"Attackers Target AI Development Platform Langflow","url":"https://otx.alienvault.com/pulse/6ac5f1632c72bc95740deede","created":"2026-10-07"},{"name":"CVE-2026-87902 WordPress LFI/RCE Active Exploitation (pearcmd file write)","url":"https://otx.alienvault.com/pulse/6ab7603a4bd9a83778e1b235","created":"2026-09-26"},{"name":"Check Point VPN Critical RCEs CVE-2026-85102/85103 — NCSC Imminent Exploitation","url":"https://otx.alienvault.com/pulse/6ab21a9c425f80eb2bbefa14","created":"2026-09-22"},{"name":"Check Point VPN Critical RCEs CVE-2026-85102/85103 — NCSC Imminent Exploitation","url":"https://otx.alienvault.com/pulse/6ab0c94cd91d45f034568114","created":"2026-09-21"},{"name":"Check Point VPN Critical RCEs CVE-2026-85102/85103 — NCSC Imminent Exploitation","url":"https://otx.alienvault.com/pulse/6aa63dd39974f63674d4d194","created":"2026-09-13"},{"name":"PaperCut NG/MF CVE-2026-81578/82078 Mass RCE via 45.142.193.132 (AI-Orchestrated)","url":"https://otx.alienvault.com/pulse/6aa63cef9672396217b8d823","created":"2026-09-13"},{"name":"SAP OVERPASS & S4GET: Critical Unauth Kernel/Message Server RCEs (CVE-2026-44756, CVE-2026-58240)","url":"https://otx.alienvault.com/pulse/6aa248d8c5b6d6b3e7daf6fb","created":"2026-09-10"},{"name":"CVE-2026-32475 Elementor Pro Form Upload RCE Actively Exploited","url":"https://otx.alienvault.com/pulse/6a9d02a18abbba31bb6a9e76","created":"2026-09-06"},{"name":"Sangoma Switchvox CVE-2026-9586 Unauth SQLi RCE Active Exploitation","url":"https://otx.alienvault.com/pulse/6a990e0862b25cd5f95220b8","created":"2026-09-03"}],"provenance":"machine"},"cwes":[{"id":"CWE-94","name":"Improper Control of Generation of Code"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-034/","tags":["x_research-advisory"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2026-4453","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-4453","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":2,"skipped":0,"earliest":"2026-09-01","earliestUrl":"https://github.com/HORKimhab/CVE-2026-0768","repos":[{"name":"HORKimhab/CVE-2026-0768","url":"https://github.com/HORKimhab/CVE-2026-0768","stars":0,"created":"2026-09-01"},{"name":"rmhowe425/POC-CVE-2026-0768","url":"https://github.com/rmhowe425/POC-CVE-2026-0768","stars":0,"created":"2026-09-02"}]},"metasploit":[{"name":"Langflow AI Validate Code Injection unauth RCE","module":"exploit/multi/http/langflow_unauth_rce_cve_2026_0768","type":"exploit","disclosureDate":"2026-09-02","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_unauth_rce_cve_2026_0768.rb"}],"nuclei":[{"id":"CVE-2026-0768","name":"Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code","severity":"critical","path":"http/cves/2026/CVE-2026-0768.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0768.yaml"}],"first":{"date":"2026-09-01","source":"PoC-in-GitHub","url":"https://github.com/HORKimhab/CVE-2026-0768"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2026-01-23","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2026-0768","provenance":"source"},{"date":"2026-08-29","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.linkedin.com/posts/ccondon_new-kev-a-few-hours-ago-vulncheck-canaries-share-7499493655918018560-_b7R/","provenance":"source"},{"date":"2026-09-01","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub; later: Metasploit 2026-09-02","url":"https://github.com/HORKimhab/CVE-2026-0768","provenance":"source"}],"speed":{"daysToPublicExploit":221,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":79.1,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":10.0,"detail":"added 62 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.62,"detail":"percentile 0.9810"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 PoC-in-GitHub repos; 1 Metasploit module; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":2.6,"detail":"13 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}