CVE-2026-0768
published 2026-01-23CVE-2026-0768: Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected…
PriorityP195critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
ITWEXPLOITVulnCheck KEVInitial access
Exploited in the wild
EPSS
22.91%
97.7th percentile
Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of the code parameter provided to the validate endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-27322.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| langflow | langflow | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vulncheck9.8CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-x5pr-rvjj-j6qm: Langflow code Code Injection Remote Code Execution Vulnerability
ghsa_unreviewed·2026-01-23
CVE-2026-0768 [CRITICAL] CWE-94 GHSA-x5pr-rvjj-j6qm: Langflow code Code Injection Remote Code Execution Vulnerability
Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of the code parameter provided to the validate endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-27322.
VulnCheck
Langflow Langflow Improper Control of Generation of Code ('Code Injection')
vulncheck·2026·CVSS 9.8
CVE-2026-0768 [CRITICAL] Langflow Langflow Improper Control of Generation of Code ('Code Injection')
Langflow Langflow Improper Control of Generation of Code ('Code Injection')
Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of the code parameter provided to the validate endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-27322.
Affected: Langflow Langflow
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mit
No detection rules found.
Nuclei
Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code
nuclei·CVSS 9.8
CVE-2026-0768 [CRITICAL] Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code
Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code
Langflow <= 1.2.x exposes POST /api/v1/validate/code without any authentication. The endpoint calls validate_code() which exec()s user-supplied Python code. Default-argument expressions in Python execute at function-definition time, allowing arbitrary OS command execution without authentication.
Template:
id: CVE-2026-0768
info:
name: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code
author: DhiyaneshDk
severity: critical
description: |
Langflow <= 1.2.x exposes POST /api/v1/validate/code without any authentication. The endpoint calls validate_code() which exec()s user-supplied Python code. Default-argument expressions in Python execute at function-definition time, allowing arbitrary OS
Metasploit
Langflow AI Validate Code Injection unauth RCE
metasploit
CVE-2026-0768 Langflow AI Validate Code Injection unauth RCE
Langflow AI Validate Code Injection unauth RCE
Langflow version 1.4.2 is susceptible to unauthenticated remote code execution due to improper handling of the code parameter provided to the `/validate` endpoint. Arbitrary code is executed under the context of the backend Langflow process.
Hackernews
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
blogs_hackernews·2026-10-15·CVSS 9.9
CVE-2026-105740 [CRITICAL] Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian.
Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM.
The vulnerability in question is CVE-2026-105740 (CVSS score: 9.9), a case of authenticated remote code execution impacting versions prior to 1.9.0.
"Any authenticated Langflow user can achieve Remote Code Execution (RCE) on
Hackernews
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
blogs_hackernews·2026-09-01·CVSS 9.8
CVE-2026-0768 [CRITICAL] Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck.
The vulnerabilities in question are listed below -
CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user.
CVE-2026-66066 aka KindaRails2Shell (CVSS score: 9.5) - A vulnerability that could allow an unauthenticated attacker to read arbitrary files from the server, leak Rails p
Wiz
CVE-2026-0768 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 9.8
CVE-2026-0768 [CRITICAL] CVE-2026-0768 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-0768 :
Homebrew vulnerability analysis and mitigation
Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of the code parameter provided to the validate endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-27322.
Source : NVD
## 9.8
Score
Published January 23, 2026
Severity CRITICAL
CNA Score 9.8
Affected Technologies
Homebrew
Has Public Exploit No
Has CISA KEV Exploi
2026-01-23
Published
Exploited in the wild