Langflow validate/code exec() Remote Code Execution (CVE-2026-0770) (Direct Check)

Binary data langflowvalidatecodercecve20260770.nbin...

CVE-2026-0770

Langflow is affected by a Remote Code Execution vulnerability (CVE-2026-0770) due to inclusion of functionality from an untrusted control sphere in the exec_globals handling of the validate endpoint. The Nuclei and PoC material indicate the flaw exists in Langflow’s validate_code path (e.g., /api...