GitHub Advisoryadvisory · PyPI

GHSA-g22f-v6f7-2hrh Langflow affected by Remote Code Execution via validate_code() exec()

HIGH Published 2026-01-23 Modified 2026-02-19 Official page ↗
Aliases
CVE-2026-0770
Ecosystem
PyPI
Packages
langflow
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Weaknesses
CWE-829
Reviewed
2026-02-19

Affected packages

• PyPI langflow: <= 1.7.3 (no fix yet)

Description

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.

Related

Alias · CVE (1)

  • CVE-2026-0770 Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. vulnerability

Weakness · CWE (1)

  • CWE-829 Inclusion of Functionality from Untrusted Control Sphere weakness

References