CVE Intelligence
Analysis AI-assisted

CVE-2026-0768: Langflow Code Injection Remote Code Execution

A code injection flaw in Langflow's validate endpoint allows remote code execution, and the record states that no authentication is required. The record lists version 1.4.2 as affected and reports a CVSS base score of 9.8, with no fixed version listed. No confirmed exploitation appears in the sources consulted.

Published Oct 24, 2026 · Updated Oct 24, 2026 · Ler em português

Overview

The Zero Day Initiative advisory describes a code injection flaw in Langflow that can lead to remote code execution. According to the record, the issue is in the validate endpoint, where a code parameter is used to run Python code without adequate validation.

Impact

  • The record states that remote attackers could execute arbitrary code on affected installations.
  • The record states that authentication is not required.
  • The record states that code would run in the context of root.
  • The CVSS base score is 9.8, rated critical.

Affected products and versions

  • Product: Langflow Langflow.
  • The record lists version 1.4.2 as affected. Whether other versions are affected is not stated in the sources consulted.

Exploitation status

The CVE is not listed in CISA KEV. No confirmed exploitation appears in the sources consulted. The SSVC data in the record shows exploitation as none and automatable as yes, which describes exposure to automation rather than observed attacks.

Remediation and mitigation

  • The record lists no fixed version. This does not mean no fix exists, so check the vendor and the ZDI advisory for updates.
  • Until a fix is confirmed, limit network access to Langflow instances, especially the validate endpoint, to trusted networks only.
  • Run Langflow with least privilege, since the record notes execution in root context.

Detection guidance

  • Review web server and application logs for unusual requests to the validate endpoint from unexpected sources.
  • Monitor Langflow hosts for unexpected processes or outbound connections.

Limitations of the available information

  • The record contains no fixed version, patch link, or vendor advisory.
  • The affected version range beyond 1.4.2 is unknown.
  • The EPSS probability is 0.23089 with a recorded date of 2026-10-23, which should be interpreted with care.
  • Technical exploitation details are intentionally omitted.

Frequently asked questions

What is the vulnerability?

According to the record, Langflow's validate endpoint does not properly validate a user-supplied code parameter before executing it as Python code, which is a code injection weakness (CWE-94).

Does exploitation require authentication?

The record states that authentication is not required to exploit this vulnerability.

Which version is listed as affected?

The record lists version 1.4.2 of Langflow. Other affected versions are not stated in the sources consulted.

Is there a fix available?

The record lists no fixed version. This does not mean no fix exists, so check the vendor and the ZDI advisory for updates.

Is this vulnerability being actively exploited?

It is not listed in CISA KEV, and no confirmed exploitation appears in the sources consulted.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.