Critical severity9.8OSV Advisory· Published Jan 23, 2026· Updated Jun 17, 2026
CVE-2026-0768
CVE-2026-0768
Description
Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of the code parameter provided to the validate endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-27322.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
31.1.2, 1.1.3, 1.1.4, …+ 2 more
- (no CPE)range: 1.1.2, 1.1.3, 1.1.4, …
- cpe:2.3:a:langflow:langflow:1.4.2:-:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
1- www.zerodayinitiative.com/advisories/ZDI-26-034/nvdThird Party Advisory
News mentions
5- Attacks Targeting Langflow AI Agent-Building Tool SurgeGovInfoSecurity · Sep 1, 2026
- Critical Langflow Vulnerability Exploited as Attacks on AI Platform RiseDark Reading · Sep 1, 2026
- Hackers Actively Exploiting Critical Langflow RCE and Rails VulnerabilityCyber Security News · Sep 1, 2026
- Hackers Start Exploiting Critical Langflow VulnerabilitySecurityWeek · Sep 1, 2026
- Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 ActivityThe Hacker News · Sep 1, 2026