Langflow bug lets anyone run code as root

Published July 21, 2026 CVE-2026-0770

Langflow is a popular AI workflow tool. A bug in it lets attackers send special requests that run commands on your computer as if you typed them yourself.

Severity
CriticalCVSS 3.0 · 9.8
Fix
Not confirmedLast checked on Sep 4, 2026
Affected versions
1.4.2
Weakness
CWE-829Inclusion of Functionality from Untrusted Sphere
Exploit likelihood
63% in 30 daysEPSS, higher than 99% of known flaws
Affects
Langflow
Exploited
Yes, in the wildListed by CISA
Added to CISA list
Jul 21, 2026
Federal fix deadline
Jul 24, 2026

How it works

An attacker sends a specially built request to Langflow that tricks it into running commands on your computer with full control.

What to do

Check the installed Langflow version. This advisory applies to 1.4.2.

Follow the Langflow advisory for a fixed release or mitigation. Then verify the installed version.

Technical details

CVE-2026-0770 (ZDI-CAN-27325, CVSS 9.8) affects the exec_globals parameter passed to Langflow's validate endpoint. The endpoint incorporates this parameter into code evaluation without properly restricting it to a trusted source, a CWE-829 inclusion of functionality from an untrusted control sphere. Because the check happens before authentication, any remote, unauthenticated user can submit a malicious exec_globals value and have it executed server-side. Trend Micro's Zero Day Initiative reports the resulting code runs in the context of root, giving a successful attacker full control of the host rather than a scoped application-level foothold.

Severity breakdown

  • Attack vector Network Requires network access to the vulnerable service
  • Attack complexity Low Low complexity under the assessed conditions
  • Privileges required None Attacker needs no account or login
  • User interaction None No victim action needed
  • Scope Unchanged Impact stays within the same security authority
  • Confidentiality impact High Sensitive data can be exposed with serious impact
  • Integrity impact High Protected data can be changed with serious impact
  • Availability impact High The service can stop or suffer serious disruption
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Open in FIRST.org calculator

References

View Original Source