CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1888 matches found

Snyk•added 2026/01/23 5:08 a.m.•20 views

Arbitrary Code Injection

Overview langflow is an A Python package with a built-in web application Affected versions of this package are vulnerable to Arbitrary Code Injection via the code parameter in the validate endpoint. An attacker can execute arbitrary code with root privileges by sending a specially crafted request...

9.8CVSS8.8AI score0.2805EPSS

SaveExploits4References2

Snyk•added 2026/01/23 5:08 a.m.•19 views

Arbitrary Code Injection

Overview lfx is a lfx is a command-line tool for running Langflow workflows. It provides two main commands: serve and run. Affected versions of this package are vulnerable to Arbitrary Code Injection via the code parameter in the validate endpoint. An attacker can execute arbitrary code with root...

9.8CVSS8.8AI score0.2805EPSS

SaveExploits4References2

Snyk•added 2026/01/23 5:08 a.m.•19 views

Unsafe Dependency Resolution

Overview lfx is a lfx is a command-line tool for running Langflow workflows. It provides two main commands: serve and run. Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the execglobals parameter in the validate endpoint. An attacker can execute arbitrary cod...

9.8CVSS8.6AI score0.62562EPSS

SaveExploits10References2

Snyk•added 2026/01/23 5:08 a.m.•10 views

Unsafe Dependency Resolution

Overview langflow is an A Python package with a built-in web application Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the execglobals parameter in the validate endpoint. An attacker can execute arbitrary code by supplying crafted input to this parameter...

9.8CVSS8.6AI score0.62562EPSS

SaveExploits10References2

NVD•added 2026/01/23 4:16 a.m.•25 views

CVE-2026-0770

Langflow execglobals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific...

9.8CVSS0.62562EPSS

SaveExploits10References2

NVD•added 2026/01/23 4:16 a.m.•29 views

CVE-2026-0768

Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the code...

9.8CVSS0.2805EPSS

SaveExploits4References1

Vulnrichment•added 2026/01/23 3:28 a.m.•5 views

CVE-2026-0770 Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

9.8CVSS8.9AI score0.62562EPSS

SaveExploits10References1

attackerkb•added 2026/01/23 3:28 a.m.•20 views

CVE-2026-0770

9.8CVSS9AI score0.62562EPSS

SaveExploits10References2Affected Software1

Mend•added 2026/01/23 3:28 a.m.•4 views

CVE-2026-0770

9.8CVSS8.9AI score0.62562EPSS

SaveExploits10References9

CVE•added 2026/01/23 3:28 a.m.•233 views

CVE-2026-0770

Langflow is affected by a Remote Code Execution vulnerability (CVE-2026-0770) due to inclusion of functionality from an untrusted control sphere in the exec_globals handling of the validate endpoint. The Nuclei and PoC material indicate the flaw exists in Langflow’s validate_code path (e.g., /api...

9.8CVSS8.9AI score0.62562EPSS

SaveIn wildExploits10References2Affected Software1

osv_cve•added 2026/01/23 3:28 a.m.•32 views

CVE-2026-0770 Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

9.8CVSS8.9AI score0.62562EPSS

SaveExploits10References4

Cvelist•added 2026/01/23 3:28 a.m.•233 views

CVE-2026-0770 Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

9.8CVSS0.62562EPSS

SaveExploits10References1

Mend•added 2026/01/23 3:28 a.m.•2 views

CVE-2026-0768

9.8CVSS9.1AI score0.2805EPSS

SaveExploits4References3

Vulnrichment•added 2026/01/23 3:28 a.m.•19 views

CVE-2026-0768 Langflow code Code Injection Remote Code Execution Vulnerability

9.8CVSS9.1AI score0.2805EPSS

SaveExploits4References1

osv_cve•added 2026/01/23 3:28 a.m.•46 views

CVE-2026-0768 Langflow code Code Injection Remote Code Execution Vulnerability

9.8CVSS9.1AI score0.2805EPSS

SaveExploits4References3

attackerkb•added 2026/01/23 3:28 a.m.•20 views

CVE-2026-0768

9.8CVSS9.2AI score0.2805EPSS

SaveExploits4References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2026/01/23 12:00 a.m.•5 views

CVE-2026-0770: Inclusion of Functionality from Untrusted Control Sphere

9.8CVSS9AI score0.62562EPSS

SaveExploits10References3

CNNVD•added 2026/01/23 12:00 a.m.•21 views

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the nftchainvalidate function potentially entering a recursive loop, which may lead to a CPU soft...

5.5CVSS6.6AI score0.0018EPSS

SaveExploits0References5

Rapid7 Vulnerability Database (full)•added 2026/01/23 12:00 a.m.•6 views

CVE-2026-0768: Improper Control of Generation of Code

9.8CVSS9.2AI score0.2805EPSS

SaveExploits4References1

Mend•added 2026/01/22 9:26 p.m.•4 views

CVE-2026-23831

Rekor is a software supply chain transparency log. In versions 1.4.3 and below, the entry implementation can panic on attacker-controlled input when canonicalizing a proposed entry with an empty spec.message, causing nil Pointer Dereference. Function validate returns nil success when message is...

6.9CVSS7.7AI score0.00426EPSS

SaveExploits0References6

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by