CVE-2026-0768
Remote code execution in Langflow via code injection
This vulnerability lets unauthenticated remote attackers execute arbitrary Python code as root on Langflow installations. The flaw is in the validate endpoint's handling of the code parameter, which lacks proper validation. No fix has been released, and the vulnerability is not yet known to be actively exploited.
Langflow · Updated 28 Oct · From the public records
Being exploitedNot reportedNo attacks reported in the records
CISA known exploitedNot listedThe US list of flaws under attack
SeveritycriticalCVSS 9.8 of 10
FixNot yetSee what to do below
Am I affected?
The records do not list fixed versions yet. Check the vendor's advisory below.
What to do
- No official fix is available. Monitor Langflow for updates. Restrict network access to the validate endpoint if possible.
What happened
- 23 OctRapid7 publishes a Metasploit Wrap Up that mentions Langflow.
The record
| CVE | What it is | Severity | CISA listed | Exploit chance, 30 days |
|---|---|---|---|---|
| CVE-2026-0768 | Langflow code Code Injection Remote Code Execution Vulnerability | critical 9.8 | No | 28% |
Our reporting
We have not reported on it. It is here because the sources below did.
Reported elsewhere
Rapid7 · 23 OctMetasploit Wrap Up: Langflow, MongoDB, and More ↗The records
CVE-2026-0768 on NVD ↗Is anything you run affected?Members connect Zotpaper to their AI assistant. It checks your own project against every vulnerability on this page and the others we track, and says what to update.
How it works