CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-01-23
Langflow exec_globals Parameter Validation Flaw Leading to Unauthenticated Remote Code Execution (CVE-2026-0770)
[Affected Scope] Active deployments of Langflow utilizing the validate API endpoint.
[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges by exploiting untrusted resource inclusion.
[Mitigation] Immediately upgrade Langflow to the latest patched version and restrict external access to the validation endpoint.