CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-01-23
Langflow exec_globals Parameter Validation Flaw Leading to Unauthenticated Remote Code Execution (CVE-2026-0770)
[Affected Scope] Active deployments of Langflow utilizing the `validate` API endpoint.
[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges by exploiting untrusted resource inclusion.
[Mitigation] Immediately upgrade Langflow to the latest patched version and restrict external access to the validation endpoint.