Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

2194 matches found

Vulnrichment
Vulnrichment•added 2026/01/23 3:28 a.m.•12 views

CVE-2026-0771 Langflow PythonFunction Code Injection Remote Code Execution Vulnerability

Langflow PythonFunction Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Attack vectors and exploitability will vary depending on the configuration of the product. The specific flaw exis...

7.1CVSS7.8AI score0.00636EPSS
SaveExploits1References1
attackerkb
attackerkb•added 2026/01/23 3:28 a.m.•19 views

CVE-2026-0771

Langflow PythonFunction Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Attack vectors and exploitability will vary depending on the configuration of the product. The specific flaw exis...

7.1CVSS6.4AI score0.00636EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist•added 2026/01/23 3:28 a.m.•52 views

CVE-2026-0771 Langflow PythonFunction Code Injection Remote Code Execution Vulnerability

Langflow PythonFunction Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Attack vectors and exploitability will vary depending on the configuration of the product. The specific flaw exis...

7.1CVSS0.00636EPSS
SaveExploits1References1
OSV
OSV•added 2026/01/23 3:28 a.m.•18 views

CVE-2026-0771 Langflow PythonFunction Code Injection Remote Code Execution Vulnerability

Langflow PythonFunction Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Attack vectors and exploitability will vary depending on the configuration of the product. The specific flaw exis...

7.1CVSS7.6AI score
SaveExploits0References3
CVE
CVE•added 2026/01/23 3:28 a.m.•53 views

CVE-2026-0771

CVE-2026-0771 affects Langflow where the vulnerability stems from the handling of Python function components. The flaw may allow an attacker to introduce custom Python code into a workflow, leading to remote code execution with the application’s context. The root cause involves unsafe handling of...

7.1CVSS7.8AI score0.00636EPSS
SaveExploits1References1Affected Software1
CVE
CVE•added 2026/01/23 3:28 a.m.•217 views

CVE-2026-0770

Langflow is affected by a Remote Code Execution vulnerability (CVE-2026-0770) due to inclusion of functionality from an untrusted control sphere in the exec_globals handling of the validate endpoint. The Nuclei and PoC material indicate the flaw exists in Langflow’s validate_code path (e.g., /api...

9.8CVSS8.6AI score0.63013EPSS
SaveIn wildExploits10References2Affected Software1
attackerkb
attackerkb•added 2026/01/23 3:28 a.m.•19 views

CVE-2026-0770

Langflow execglobals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific...

9.8CVSS8.6AI score0.63013EPSS
SaveExploits10References2Affected Software1
Cvelist
Cvelist•added 2026/01/23 3:28 a.m.•153 views

CVE-2026-0770 Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

Langflow execglobals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific...

9.8CVSS0.63013EPSS
SaveExploits10References1
Vulnrichment
Vulnrichment•added 2026/01/23 3:28 a.m.•4 views

CVE-2026-0770 Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

Langflow execglobals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific...

9.8CVSS8.6AI score0.63013EPSS
SaveExploits10References1
OSV
OSV•added 2026/01/23 3:28 a.m.•22 views

CVE-2026-0770 Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

Langflow execglobals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific...

9.8CVSS7.7AI score
SaveExploits0References4
Cvelist
Cvelist•added 2026/01/23 3:28 a.m.•325 views

CVE-2026-0769 Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability

Langflow evalcustomcomponentcode Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.8CVSS0.41695EPSS
SaveExploits4References1
Vulnrichment
Vulnrichment•added 2026/01/23 3:28 a.m.•15 views

CVE-2026-0769 Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability

Langflow evalcustomcomponentcode Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.8CVSS8.7AI score0.41695EPSS
SaveExploits4References1
attackerkb
attackerkb•added 2026/01/23 3:28 a.m.•13 views

CVE-2026-0769

Langflow evalcustomcomponentcode Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.8CVSS8.7AI score0.41695EPSS
SaveExploits4References2Affected Software1
CVE
CVE•added 2026/01/23 3:28 a.m.•129 views

CVE-2026-0769

The Langflow framework is vulnerable to an Eval Injection Remote Code Execution vulnerability in the eval_custom_component_code function. The flaw stems from a lack of proper validation of user-supplied strings before they are used to execute Python code. Attackers can leverage this to execute ar...

9.8CVSS8.7AI score0.41695EPSS
SaveIn wildExploits4References1Affected Software1
Mend
Mend•added 2026/01/23 3:28 a.m.•1 views

CVE-2026-0769

Langflow evalcustomcomponentcode Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.8CVSS0.41695EPSS
SaveExploits4References3
OSV
OSV•added 2026/01/23 3:28 a.m.•30 views

CVE-2026-0769 Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability

Langflow evalcustomcomponentcode Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.8CVSS7.7AI score
SaveExploits0References3
OSV
OSV•added 2026/01/23 3:28 a.m.•39 views

CVE-2026-0768 Langflow code Code Injection Remote Code Execution Vulnerability

Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the code...

9.8CVSS7.7AI score
SaveExploits0References3
CVE
CVE•added 2026/01/23 3:28 a.m.•104 views

CVE-2026-0768

Langflow versions

9.8CVSS8.9AI score0.23227EPSS
SaveIn wildExploits4References1Affected Software1
Cvelist
Cvelist•added 2026/01/23 3:28 a.m.•60 views

CVE-2026-0768 Langflow code Code Injection Remote Code Execution Vulnerability

Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the code...

9.8CVSS0.23227EPSS
SaveExploits4References1
Vulnrichment
Vulnrichment•added 2026/01/23 3:28 a.m.•18 views

CVE-2026-0768 Langflow code Code Injection Remote Code Execution Vulnerability

Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the code...

9.8CVSS8.9AI score0.23227EPSS
SaveExploits4References1
Rows per page
Query Builder