Langflow code Code Injection Remote Code Execution Vulnerability
Langflow · Langflow
Langflow contains a code injection flaw in the handling of the code parameter sent to its validate endpoint, where a user-supplied string is passed to Python execution without proper validation. An remote attacker who can reach the Langflow service can exploit it without authentication or user interaction to run arbitrary code with root privileges.
Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the code parameter provided to the validate endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-27322.
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited 7 months after disclosure. Public exploit code (PoC-in-GitHub) appeared 7 months after disclosure.
- Disclosedday 0
- First seen exploitedVulnCheck KEV evidence+7 mo
- Public exploit codePoC-in-GitHub+7 mo
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.
What security researchers reported
Not named in any threat report yetAlso mentioned in 13 community threat pulses (AlienVault OTX)
Weaker evidencePulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.
- Attackers Target AI Development Platform Langflow8 Oct 2026
- Attackers Target AI Development Platform Langflow7 Oct 2026
- CVE-2026-87902 WordPress LFI/RCE Active Exploitation (pearcmd file write)26 Sep 2026
- Check Point VPN Critical RCEs CVE-2026-85102/85103 — NCSC Imminent Exploitation22 Sep 2026
- Check Point VPN Critical RCEs CVE-2026-85102/85103 — NCSC Imminent Exploitation21 Sep 2026
- Check Point VPN Critical RCEs CVE-2026-85102/85103 — NCSC Imminent Exploitation13 Sep 2026
- 7 more on OTX