Skip to content
Heist/ feed
Back to feed
Critical

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

Type: advisorySources: OSV

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-0770
Confirmed fixed CVEs
Not specified
Updated in this feed
7 Nov 2026, 02:05 UTC · Revision 1

Source evidence

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

core-osv · Original source

Published 23 Jan 2026, 03:28 UTC

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.

osv:CVE-2026-0770
Complete source record
{
  "id": "0676e84145345f6a269f5e808c62e32b0155693c2bb60dc6ddeb6a3e937c2849",
  "url": "https://osv.dev/vulnerability/CVE-2026-0770",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability",
    "summary": "Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.",
    "evidence": "osv:CVE-2026-0770",
    "products": [],
    "severity": "critical",
    "structured": {
      "id": "CVE-2026-0770",
      "aliases": [
        "CVE-2026-0770",
        "GHSA-g22f-v6f7-2hrh",
        "PYSEC-2026-1525"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/langflow-ai/langflow",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "dbe777ecaa51042f84c6f31629d59a6596835fd2"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "last_affected": "1.7.3"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v1.7.3",
            "1.7.3",
            "v1.7.2",
            "1.7.1",
            "1.7.0",
            "v1.7.0",
            "1.7.0rc1",
            "v1.7.0rc1",
            "1.7.0-pre",
            "1.5.0.post1",
            "1.4.2",
            "1.4.1",
            "1.4.0",
            "1.3.4",
            "1.3.3",
            "1.3.2",
            "1.3.1",
            "1.3.0",
            "1.2.0",
            "1.1.4",
            "1.1.3",
            "1.1.2",
            "v1.1.1",
            "v1.1.0",
            "v1.0.19",
            "v1.0.18",
            "v1.0.17",
            "v1.0.16",
            "v1.0.15",
            "v1.0.13",
            "v1.0.14",
            "v1.0.12",
            "v1.0.11",
            "v1.0.10",
            "v1.0.9",
            "v1.0.8",
            "v1.0.7",
            "v1.0.6",
            "v1.0.5",
            "v1.0.4",
            "v1.0.3",
            "v1.0.2",
            "v0.6.19",
            "v0.6.18",
            "v0.6.17",
            "v0.6.16",
            "v0.6.15",
            "v0.6.14",
            "v0.6.13",
            "v0.6.12",
            "v0.6.11",
            "v0.6.10",
            "v0.6.9",
            "v0.6.8",
            "v0.6.7",
            "v0.6.6",
            "v0.6.5",
            "v0.6.4",
            "v0.6.3",
            "v0.6.3a6",
            "v0.6.3a5",
            "v0.6.3a4",
            "v0.6.3a3",
            "v0.6.3a2",
            "v0.6.3a1",
            "v0.6.3a0",
            "v0.6.2",
            "v0.6.1",
            "v0.6.0",
            "v0.6.0rc1",
            "v0.5.12",
            "v0.5.11",
            "v0.5.10",
            "v0.5.9",
            "v0.5.8",
            "v0.6.0a0",
            "v0.5.7",
            "v0.5.6",
            "v0.5.5",
            "v0.5.4",
            "v0.5.3",
            "v0.5.2",
            "v0.5.1",
            "v0.5.0",
            "v0.5.0b6",
            "v0.5.0b5",
            "v0.5.0b4",
            "v0.5.0b3",
            "v0.5.0b2",
            "v0.5.0b0",
            "v0.5.0a6",
            "v0.5.0a5",
            "v0.5.0a4",
            "v0.5.0a3",
            "v0.5.0a2",
            "v0.4.21",
            "v0.5.0a1",
            "v0.4.20",
            "v0.4.19",
            "v0.4.18",
            "v0.5.0a0",
            "v0.4.17",
            "v0.4.16",
            "v0.4.15",
            "v0.4.14",
            "v0.4.12",
            "v0.4.11",
            "v0.4.10",
            "v0.4.9",
            "v0.4.8",
            "v0.4.7",
            "v0.4.6",
            "v0.4.5",
            "v0.4.4",
            "v0.4.3",
            "v0.4.2",
            "v0.4.1",
            "v0.4.0",
            "v0.3.4",
            "v0.3.3",
            "v0.3.2",
            "v0.3.1",
            "v0.3.0",
            "v0.2.13",
            "v0.2.12",
            "v0.2.11",
            "v0.2.10",
            "v0.2.9",
            "v0.2.8",
            "v0.2.7",
            "v0.2.6",
            "v0.2.5",
            "v0.2.4",
            "v0.2.0",
            "v0.2.3",
            "v0.2.2",
            "v0.2.1",
            "v0.1.7",
            "v0.1.6",
            "v0.1.5",
            "v0.1.4",
            "v0.1.3",
            "v0.1.2",
            "v0.1.0",
            "v0.0.89",
            "v0.0.88",
            "v0.0.87",
            "v0.0.86",
            "v0.0.85",
            "v0.0.84",
            "v0.0.83",
            "v0.0.82",
            "v0.0.81",
            "v0.0.80",
            "v0.0.79",
            "v0.0.78",
            "v0.0.77",
            "v0.0.76",
            "v0.0.75",
            "v0.0.74",
            "v0.0.73",
            "v0.0.72",
            "v0.0.71",
            "v0.0.70",
            "v0.0.69",
            "v0.0.31"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-0770.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:48.957607710Z",
      "provider": "osv",
      "references": [
        "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0770",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0770.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-0770",
        "https://www.zerodayinitiative.com/advisories/ZDI-26-036/"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-829"
        ],
        "cna_assigner": "zdi",
        "unresolved_ranges": [
          {
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "1.4.2"
                  },
                  {
                    "last_affected": "1.4.2"
                  }
                ],
                "source": "AFFECTED_FIELD",
                "strategy": "StandaloneSingleVersion"
              }
            ]
          }
        ],
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0770.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-0770",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 517218,
  "published_at": "2026-01-23T03:28:52.286+00:00"
}