CVE-2026-0768

CVE Enrichment

CVSS: 9.8 CRITICAL
EPSS: 22.92%
EPSS Percentile: 97.74%
CISA KEV: Not listed

Description

Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the code parameter provided to the validate endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-27322.

Technical Details

CVSS Version: 3.0
CNA / NVD Source: [email protected]
Published: 23-Jan-2026 11:16
Last Modified: 17-Jun-2026 17:11
EPSS Date: 2026-10-22
CWE: CWE-94

CVSS Vector


            CVSS:3.0                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

langflow / langflow
Version / affected range: 1.4.2
cpe:2.3:a:langflow:langflow:1.4.2:-:*:*:*:*:*:*

References

[email protected]

Last enrichment sync: 23-Oct-2026 06:49
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (3)

they cover an authentication bypass (CVE-2026-93680), 3 unauthenticated remote code execution paths (CVE-2026-0768, CVE-2026-0769, and CVE-2026-10134), and 2 authenticated code execution flaws (CVE-2026-7873 and Metasploit Adds Exploit Modules for Langflow, OpenCTI, Grafana and More
Threat actors are actively exploiting CVE-2026-0768 in Langflow to gain unauthenticated remote code execution and steal credentials, tokens, and keys from vulnerable AI application environments. Attackers Exploit Langflow RCE Flaw to Steal OpenAI and AWS Credentials
Tracked as CVE-2026-0768 (CVSS score of 9.8), the security defect exists within the code validator in Langflow’s custom component editor. Attackers Exploit Critical Langflow Remote Code Execution Flaw

CVE (15)

People (12)

MITRE ATT&CK (5)

Vendors (3)

Products (6)

Tools (1)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.