CVE-2026-0768
Critical9.8Langflow code Code Injection Remote Code Execution Vulnerabilitytitle from the CVE record
Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the code parameter provided to the validate endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-27322.
- CVSS
- 9.8v3.0
- EPSS (exploit probability)
- 23.1%98th pct
- CISA KEV
- Not listed
EPSS trendFIRST daily scores, last 90 days
Daily values
| Score date | EPSS | Percentile |
|---|---|---|
| 2026-10-23 | 23.1% | 97.8% |
| 2026-10-22 | 22.9% | 97.7% |
| 2026-10-21 | 22.9% | 97.7% |
| 2026-10-20 | 22.9% | 97.7% |
| 2026-10-19 | 22.9% | 97.7% |
| 2026-10-18 | 23.2% | 97.8% |
| 2026-10-17 | 23.2% | 97.8% |
| 2026-10-16 | 23.2% | 97.8% |
| 2026-10-15 | 23.2% | 97.7% |
| 2026-10-14 | 23.2% | 97.7% |
| 2026-10-13 | 23.2% | 97.7% |
| 2026-10-12 | 23.2% | 97.7% |
| 2026-10-11 | 23.2% | 97.7% |
| 2026-10-10 | 23.2% | 97.7% |
| 2026-10-09 | 23.2% | 97.7% |
| 2026-10-08 | 8.5% | 94.9% |
| 2026-10-07 | 8.5% | 94.9% |
| 2026-10-06 | 8.5% | 94.9% |
| 2026-10-05 | 8.5% | 94.9% |
| 2026-10-04 | 8.5% | 94.9% |
| 2026-10-03 | 8.5% | 94.9% |
| 2026-10-02 | 8.5% | 94.9% |
| 2026-10-01 | 8.5% | 94.8% |
| 2026-09-30 | 8.5% | 94.8% |
| 2026-09-29 | 8.5% | 94.8% |
| 2026-09-27 | 8.5% | 94.8% |
| 2026-09-26 | 8.5% | 94.8% |
| 2026-09-25 | 8.5% | 94.8% |
| 2026-09-24 | 8.5% | 94.8% |
| 2026-09-23 | 7.8% | 94.4% |
| 2026-09-22 | 7.8% | 94.4% |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Learn
Why it happened and what stops it
The weakness (CWE)
How attackers use it (ATT&CK)
Typical for this kind of weakness across CISA KEV exploits (CTID), not specific to this CVE.
How it's exploited
What the attacker gets
Controls that mitigate it (NIST SP 800-53)
- SI-4System MonitoringSystem and Information Integrity · mitigates 9 of these techniques
- CM-6Configuration SettingsConfiguration Management · mitigates 8 of these techniques
- SI-3Malicious Code ProtectionSystem and Information Integrity · mitigates 8 of these techniques
- AC-6Least PrivilegeAccess Control · mitigates 7 of these techniques
- AC-2Account ManagementAccess Control · mitigates 6 of these techniques
- AC-3Access EnforcementAccess Control · mitigates 6 of these techniques
Affected products
- langflow langflow