{"schema":"vulnpedia.poc/1","cve":"CVE-2026-0770","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-07-21","ransomware":false},"epss":{"score":0.62562,"percentile":0.99183},"cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_rce_cve_2026_0770.rb","executable":true,"sourceId":"exploit/multi/http/langflow_rce_cve_2026_0770","description":"Langflow Unauthenticated RCE (validate endpoint)","verification":"catalogued","source":"metasploit","modified":"2026-09-07 21:49:25 +0000","origins":[{"source":"metasploit","sourceId":"exploit/multi/http/langflow_rce_cve_2026_0770","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_rce_cve_2026_0770.rb"},{"source":"metasploit","sourceId":"exploit/multi/http/langflow_rce_cve_2026_0770","modified":"2026-09-07 21:49:25 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_rce_cve_2026_0770.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/3a8abdf7bf79","executable":false,"sourceId":"3a8abdf7bf79","verification":"catalogued","source":"vulncheck-kev","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3a8abdf7bf79","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/xdb/3a8abdf7bf79"}],"repositoryUrl":"https://github.com/affix/CVE-2026-0770-PoC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/ed26e7d7f607","executable":false,"sourceId":"ed26e7d7f607","verification":"catalogued","source":"vulncheck-kev","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ed26e7d7f607","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/xdb/ed26e7d7f607"}],"repositoryUrl":"https://github.com/0xgh057r3c0n/CVE-2026-0770"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/51c91dc96eca","executable":false,"sourceId":"51c91dc96eca","verification":"catalogued","source":"vulncheck-kev","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"51c91dc96eca","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/xdb/51c91dc96eca"}],"repositoryUrl":"https://github.com/Ez4rd1x1/CVE-2026-0770"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/99197d5fc80f","executable":false,"sourceId":"99197d5fc80f","verification":"catalogued","source":"vulncheck-kev","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"99197d5fc80f","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/xdb/99197d5fc80f"}],"repositoryUrl":"https://github.com/diamorphine666/CVE-2026-0770"},{"kind":"exploitdb","id":"52597","url":"https://www.exploit-db.com/exploits/52597","code":"https://www.exploit-db.com/download/52597","executable":true}],"poc_candidates":[{"url":"https://github.com/affix/CVE-2026-0770-PoC","source":"poc-in-github","sourceId":"CVE-2026-0770","description":"Proof of Concept for CVE-2026-0770 - Langflow Remote Code Execution","modified":"2026-08-16T06:47:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/affix/CVE-2026-0770-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-08-16T06:47:00Z","url":"https://github.com/affix/CVE-2026-0770-PoC"}],"tags":[]},{"url":"https://github.com/0xgh057r3c0n/CVE-2026-0770","source":"poc-in-github","sourceId":"CVE-2026-0770","description":"Langflow Remote Code Execution (RCE) Proof-of-Concept","modified":"2026-03-02T14:10:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/0xgh057r3c0n/CVE-2026-0770"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-03-02T14:10:01Z","url":"https://github.com/0xgh057r3c0n/CVE-2026-0770"}],"tags":[]},{"url":"https://github.com/Yetazyyy/CVE-2026-0770","source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-03-09T17:03:18Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/Yetazyyy/CVE-2026-0770"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-03-09T17:03:18Z","url":"https://github.com/Yetazyyy/CVE-2026-0770"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-0770","source":"poc-in-github","sourceId":"CVE-2026-0770","description":"CVE-2026-0770","modified":"2026-04-15T10:37:53Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/0xBlackash/CVE-2026-0770"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-04-15T10:37:53Z","url":"https://github.com/0xBlackash/CVE-2026-0770"}],"tags":[]},{"url":"https://github.com/Ez4rd1x1/CVE-2026-0770","source":"poc-in-github","sourceId":"CVE-2026-0770","description":"LangFlow RCE | CVE-2026-0770 | Proof-Of-Concept","modified":"2026-05-15T07:16:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/Ez4rd1x1/CVE-2026-0770"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-05-15T07:16:16Z","url":"https://github.com/Ez4rd1x1/CVE-2026-0770"}],"tags":[]},{"url":"https://github.com/diamorphine666/CVE-2026-0770","source":"poc-in-github","sourceId":"CVE-2026-0770","description":"Langflow remote code execution exploit","modified":"2026-05-23T21:28:06Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/diamorphine666/CVE-2026-0770"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-05-23T21:28:06Z","url":"https://github.com/diamorphine666/CVE-2026-0770"}],"tags":[]},{"url":"https://github.com/razureink/cve-2026-0770-langflow_rce_reproduction","source":"poc-in-github","sourceId":"CVE-2026-0770","description":"CVE Reproduction: cve-2026-0770-langflow_rce_reproduction","modified":"2026-07-23T03:46:24Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/razureink/cve-2026-0770-langflow_rce_reproduction"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-07-23T03:46:24Z","url":"https://github.com/razureink/cve-2026-0770-langflow_rce_reproduction"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-0770 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2026-0770 && searchsploit -m 52597","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-0770/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0770.yaml","template":"http/cves/2026/CVE-2026-0770.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-0770%22&type=repositories","executable":false}]}