CVE-2026-0770: Langflow validate endpoint exec_globals remote code execution

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 17 September 2026. Confidence: high.

critical priorityUnauthenticated remote code execution as root with a CVSS of 9.8 and confirmed inclusion in CISA KEV makes this an urgent patching priority.

What it is

Langflow mishandles the exec_globals parameter passed to its validate endpoint, allowing functionality from an untrusted control sphere to be included and executed. Because the endpoint is reachable without authentication, an unauthenticated remote attacker can run arbitrary code on affected installations. The flaw is rated critical (CVSS 9.8) and is listed in CISA's KEV catalog, so it warrants urgent attention.

Impact

An attacker gains arbitrary code execution in the context of root, giving full control of the Langflow host and any data or credentials it can reach. This can lead to complete compromise of the affected installation.

Attack surface

The flaw is reached over the network through the validate endpoint's exec_globals parameter, per the CVSS vector AV:N/AC:L/PR:N/UI:N. No authentication and no user interaction are required.

Exploitation

CVE-2026-0770 is listed in CISA KEV with a 30-day EPSS probability of roughly 0.63 (99th percentile), indicating observed exploitation and high likelihood of attempted exploitation. No ransomware campaign use is documented in the record.

What to do

• Apply the vendor's patch or mitigation for the validate endpoint as directed by CISA's KEV required action; if no fix is available, discontinue use of the product.
• Restrict network access to the Langflow validate endpoint so it is not reachable from untrusted networks, and evaluate internet exposure per BOD 26-04.
• Run Langflow with least privilege rather than root to limit the impact of code execution.
• Monitor vendor and ZDI advisories for updated guidance and re-check exposure after patching.

Detection

• Review Langflow logs for requests to the validate endpoint containing unexpected or attacker-controlled exec_globals values.
• Hunt for anomalous child processes or outbound connections spawned by the Langflow service, especially those running as root.
• Alert on unexpected file writes or new executables in Langflow host directories.
• Correlate network logs for external access to the validate endpoint with process execution telemetry on the Langflow host.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.