{"schema":"vulnpedia.research/1","cve":"CVE-2026-0770","references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-036/","tags":["x_research-advisory","Third Party Advisory"],"source":"mitre","sourceId":"zdi","modified":"2026-01-23T03:28:52.286Z","origins":[{"source":"mitre","sourceId":"zdi","modified":"2026-01-23T03:28:52.286Z","url":"https://www.zerodayinitiative.com/advisories/ZDI-26-036/"},{"source":"nvd","sourceId":"CVE-2026-0770","modified":"2026-07-22T05:17:08.693","url":"https://www.zerodayinitiative.com/advisories/ZDI-26-036/"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0770","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-07-22T03:55:44.396Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-07-22T03:55:44.396Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0770"},{"source":"nvd","sourceId":"CVE-2026-0770","modified":"2026-07-22T05:17:08.693","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0770"}]},{"url":"https://osv.dev/vulnerability/GHSA-g22f-v6f7-2hrh","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","modified":"2026-07-07T17:56:40.532514419Z","origins":[{"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","url":"https://osv.dev/vulnerability/GHSA-g22f-v6f7-2hrh"},{"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","modified":"2026-07-07T17:56:40.532514419Z","url":"https://osv.dev/vulnerability/GHSA-g22f-v6f7-2hrh"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0770","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","modified":"2026-07-07T17:56:40.532514419Z","origins":[{"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0770"},{"source":"pysec","sourceId":"PYSEC-2026-1525","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0770"},{"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","modified":"2026-07-07T17:56:40.532514419Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0770"}]},{"url":"https://github.com/affix/CVE-2026-0770-PoC","tags":["WEB","XDB repository"],"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","modified":"2026-07-07T17:56:40.532514419Z","origins":[{"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","url":"https://github.com/affix/CVE-2026-0770-PoC"},{"source":"pysec","sourceId":"PYSEC-2026-1525","url":"https://github.com/affix/CVE-2026-0770-PoC"},{"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","modified":"2026-07-07T17:56:40.532514419Z","url":"https://github.com/affix/CVE-2026-0770-PoC"},{"source":"vulncheck-kev","sourceId":"3a8abdf7bf79","modified":"2026-02-14T00:00:00Z","url":"https://github.com/affix/CVE-2026-0770-PoC"}]},{"url":"https://github.com/langflow-ai/langflow","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","modified":"2026-07-07T17:56:40.532514419Z","origins":[{"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","url":"https://github.com/langflow-ai/langflow"},{"source":"pysec","sourceId":"PYSEC-2026-1525","url":"https://github.com/langflow-ai/langflow"},{"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","modified":"2026-07-07T17:56:40.532514419Z","url":"https://github.com/langflow-ai/langflow"}]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-036","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","modified":"2026-07-07T17:56:40.532514419Z","origins":[{"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","url":"https://www.zerodayinitiative.com/advisories/ZDI-26-036"},{"source":"pysec","sourceId":"PYSEC-2026-1525","url":"https://www.zerodayinitiative.com/advisories/ZDI-26-036"},{"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","modified":"2026-07-07T17:56:40.532514419Z","url":"https://www.zerodayinitiative.com/advisories/ZDI-26-036"}]},{"url":"https://osv.dev/vulnerability/PYSEC-2026-1525","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-1525","modified":"2026-07-07T17:46:36.796519977Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-1525","url":"https://osv.dev/vulnerability/PYSEC-2026-1525"},{"source":"pysec","sourceId":"PYSEC-2026-1525","modified":"2026-07-07T17:46:36.796519977Z","url":"https://osv.dev/vulnerability/PYSEC-2026-1525"}]},{"url":"https://pypi.org/project/langflow","tags":["PACKAGE"],"source":"pysec","sourceId":"PYSEC-2026-1525","modified":"2026-07-07T17:46:36.796519977Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-1525","url":"https://pypi.org/project/langflow"},{"source":"pysec","sourceId":"PYSEC-2026-1525","modified":"2026-07-07T17:46:36.796519977Z","url":"https://pypi.org/project/langflow"}]},{"url":"https://github.com/advisories/GHSA-g22f-v6f7-2hrh","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-1525","modified":"2026-07-07T17:46:36.796519977Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-1525","url":"https://github.com/advisories/GHSA-g22f-v6f7-2hrh"},{"source":"pysec","sourceId":"PYSEC-2026-1525","modified":"2026-07-07T17:46:36.796519977Z","url":"https://github.com/advisories/GHSA-g22f-v6f7-2hrh"}]},{"source":"euvd","sourceId":"EUVD-2026-4466","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-4466","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-4466","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-4466"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://www.labs.greynoise.io/grimoire/2026-02-13-weekly-oast-report/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","url":"https://www.labs.greynoise.io/grimoire/2026-02-13-weekly-oast-report/"}]},{"url":"https://www.labs.greynoise.io/grimoire/2026-02-20-weekly-oast-report/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","url":"https://www.labs.greynoise.io/grimoire/2026-02-20-weekly-oast-report/"}]},{"url":"https://blog.previdian.com/cve-2026-0770-exploited-in-the-wild-langflow-rce-added-to-cisa-kev/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","url":"https://blog.previdian.com/cve-2026-0770-exploited-in-the-wild-langflow-rce-added-to-cisa-kev/"}]},{"url":"https://previdian.com/CVE-2026-0770","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","url":"https://previdian.com/CVE-2026-0770"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://www.resecurity.com/es/blog/article/exploiting-langflows-validatecode-endpoint-for-remote-code-execution","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","url":"https://www.resecurity.com/es/blog/article/exploiting-langflows-validatecode-endpoint-for-remote-code-execution"}]},{"url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape"}]},{"url":"https://www.acn.gov.it/portale/documents/20119/1300791/Operational_Summary_lug26_CLEAR.pdf/88b05799-3e4c-f3ed-4a42-d9e68e080604?t=1787220905144","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","url":"https://www.acn.gov.it/portale/documents/20119/1300791/Operational_Summary_lug26_CLEAR.pdf/88b05799-3e4c-f3ed-4a42-d9e68e080604?t=1787220905144"}]},{"url":"https://expel.com/blog/the-ai-cve-exploitation-evidence-story-headlines-are-scarier-than-reality/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","url":"https://expel.com/blog/the-ai-cve-exploitation-evidence-story-headlines-are-scarier-than-reality/"}]},{"url":"https://www.vulncheck.com/blog/pwning-the-ai-stack","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","url":"https://www.vulncheck.com/blog/pwning-the-ai-stack"}]},{"url":"https://vulncheck.com/xdb/3a8abdf7bf79","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"3a8abdf7bf79","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3a8abdf7bf79","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/xdb/3a8abdf7bf79"}]},{"url":"https://vulncheck.com/xdb/ed26e7d7f607","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"ed26e7d7f607","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ed26e7d7f607","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/xdb/ed26e7d7f607"}]},{"url":"https://github.com/0xgh057r3c0n/CVE-2026-0770","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"ed26e7d7f607","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ed26e7d7f607","modified":"2026-02-14T00:00:00Z","url":"https://github.com/0xgh057r3c0n/CVE-2026-0770"}]},{"url":"https://vulncheck.com/xdb/51c91dc96eca","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"51c91dc96eca","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"51c91dc96eca","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/xdb/51c91dc96eca"}]},{"url":"https://github.com/Ez4rd1x1/CVE-2026-0770","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"51c91dc96eca","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"51c91dc96eca","modified":"2026-02-14T00:00:00Z","url":"https://github.com/Ez4rd1x1/CVE-2026-0770"}]},{"url":"https://vulncheck.com/xdb/99197d5fc80f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"99197d5fc80f","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"99197d5fc80f","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/xdb/99197d5fc80f"}]},{"url":"https://github.com/diamorphine666/CVE-2026-0770","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"99197d5fc80f","modified":"2026-02-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"99197d5fc80f","modified":"2026-02-14T00:00:00Z","url":"https://github.com/diamorphine666/CVE-2026-0770"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","url":"https://osv.dev/vulnerability/GHSA-g22f-v6f7-2hrh","ecosystem":"PyPI","name":"langflow","purl":"pkg:pypi/langflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.7.3"}]}],"versions":["0.0.31","0.0.32","0.0.33","0.0.40","0.0.44","0.0.45","0.0.46","0.0.52","0.0.53","0.0.54","0.0.55","0.0.56","0.0.57","0.0.58","0.0.61","0.0.62","0.0.63","0.0.64","0.0.65","0.0.66","0.0.67","0.0.68","0.0.69","0.0.70","0.0.71","0.0.72","0.0.73","0.0.74","0.0.75","0.0.76","0.0.78","0.0.79","0.0.80","0.0.81","0.0.83","0.0.84","0.0.85","0.0.86","0.0.87","0.0.88","0.0.89","0.1.0","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.2.0","0.2.1","0.2.10","0.2.11","0.2.12","0.2.13","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6","0.2.7","0.2.8","0.2.9","0.3.0","0.3.1","0.3.2","0.3.3","0.3.4","0.4.0","0.4.1","0.4.10","0.4.11","0.4.12","0.4.14","0.4.15","0.4.16","0.4.17","0.4.18","0.4.19","0.4.2","0.4.20","0.4.21","0.4.3","0.4.4","0.4.5","0.4.6","0.4.7","0.4.8","0.4.9","0.5.0","0.5.0a0","0.5.0a1","0.5.0a2","0.5.0a3","0.5.0a4","0.5.0a5","0.5.0a6","0.5.0b0","0.5.0b2","0.5.0b3","0.5.0b4","0.5.0b5","0.5.0b6","0.5.1","0.5.10","0.5.11","0.5.12","0.5.2","0.5.3","0.5.4","0.5.5","0.5.6","0.5.7","0.5.8","0.5.9","0.6.0","0.6.0rc1","0.6.1","0.6.10","0.6.11","0.6.12","0.6.14","0.6.15","0.6.16","0.6.17","0.6.18","0.6.19","0.6.2","0.6.3","0.6.3a0","0.6.3a1","0.6.3a2","0.6.3a3","0.6.3a4","0.6.3a5","0.6.3a6","0.6.3a7","0.6.4","0.6.4a0","0.6.4a1","0.6.5","0.6.5a0","0.6.5a1","0.6.5a10","0.6.5a11","0.6.5a12","0.6.5a13","0.6.5a2","0.6.5a3","0.6.5a4","0.6.5a5","0.6.5a6","0.6.5a7","0.6.5a8","0.6.5a9","0.6.6","0.6.7","0.6.7a1","0.6.7a2","0.6.7a3","0.6.7a5","0.6.8","0.6.9","1.0.0","1.0.0a0","1.0.0a1","1.0.0a10","1.0.0a11","1.0.0a12","1.0.0a13","1.0.0a14","1.0.0a15","1.0.0a17","1.0.0a18","1.0.0a19","1.0.0a2","1.0.0a20","1.0.0a21","1.0.0a22","1.0.0a23","1.0.0a24","1.0.0a25","1.0.0a26","1.0.0a27","1.0.0a28","1.0.0a29","1.0.0a3","1.0.0a30","1.0.0a31","1.0.0a32","1.0.0a33","1.0.0a34","1.0.0a35","1.0.0a36","1.0.0a37","1.0.0a38","1.0.0a39","1.0.0a4","1.0.0a40","1.0.0a41","1.0.0a42","1.0.0a43","1.0.0a44","1.0.0a45","1.0.0a46","1.0.0a47","1.0.0a48","1.0.0a49","1.0.0a5","1.0.0a50","1.0.0a51","1.0.0a52","1.0.0a53","1.0.0a55","1.0.0a56","1.0.0a57","1.0.0a58","1.0.0a59","1.0.0a6","1.0.0a60","1.0.0a61","1.0.0a7","1.0.0a8","1.0.0a9","1.0.0rc0","1.0.0rc1","1.0.1","1.0.10","1.0.11","1.0.12","1.0.13","1.0.14","1.0.15","1.0.16","1.0.17","1.0.18","1.0.19","1.0.19.post1","1.0.19.post2","1.0.2","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8","1.0.9","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.4.post1","1.2.0","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.4.0","1.4.1","1.4.2","1.4.3","1.5.0","1.5.0.post1","1.5.0.post2","1.5.1","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.6.9","1.7.0","1.7.1","1.7.2","1.7.3"],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/01/GHSA-g22f-v6f7-2hrh/GHSA-g22f-v6f7-2hrh.json"},"modified":"2026-07-07T17:56:40.532514419Z","origins":[{"source":"ghsa","sourceId":"GHSA-g22f-v6f7-2hrh","modified":"2026-07-07T17:56:40.532514419Z","url":"https://osv.dev/vulnerability/GHSA-g22f-v6f7-2hrh"}]},{"source":"pysec","sourceId":"PYSEC-2026-1525","url":"https://osv.dev/vulnerability/PYSEC-2026-1525","ecosystem":"PyPI","name":"langflow","purl":"pkg:pypi/langflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.7.3"}]}],"versions":["0.0.31","0.0.32","0.0.33","0.0.40","0.0.44","0.0.45","0.0.46","0.0.52","0.0.53","0.0.54","0.0.55","0.0.56","0.0.57","0.0.58","0.0.61","0.0.62","0.0.63","0.0.64","0.0.65","0.0.66","0.0.67","0.0.68","0.0.69","0.0.70","0.0.71","0.0.72","0.0.73","0.0.74","0.0.75","0.0.76","0.0.78","0.0.79","0.0.80","0.0.81","0.0.83","0.0.84","0.0.85","0.0.86","0.0.87","0.0.88","0.0.89","0.1.0","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.2.0","0.2.1","0.2.10","0.2.11","0.2.12","0.2.13","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6","0.2.7","0.2.8","0.2.9","0.3.0","0.3.1","0.3.2","0.3.3","0.3.4","0.4.0","0.4.1","0.4.10","0.4.11","0.4.12","0.4.14","0.4.15","0.4.16","0.4.17","0.4.18","0.4.19","0.4.2","0.4.20","0.4.21","0.4.3","0.4.4","0.4.5","0.4.6","0.4.7","0.4.8","0.4.9","0.5.0","0.5.0a0","0.5.0a1","0.5.0a2","0.5.0a3","0.5.0a4","0.5.0a5","0.5.0a6","0.5.0b0","0.5.0b2","0.5.0b3","0.5.0b4","0.5.0b5","0.5.0b6","0.5.1","0.5.10","0.5.11","0.5.12","0.5.2","0.5.3","0.5.4","0.5.5","0.5.6","0.5.7","0.5.8","0.5.9","0.6.0","0.6.0rc1","0.6.1","0.6.10","0.6.11","0.6.12","0.6.14","0.6.15","0.6.16","0.6.17","0.6.18","0.6.19","0.6.2","0.6.3","0.6.3a0","0.6.3a1","0.6.3a2","0.6.3a3","0.6.3a4","0.6.3a5","0.6.3a6","0.6.3a7","0.6.4","0.6.4a0","0.6.4a1","0.6.5","0.6.5a0","0.6.5a1","0.6.5a10","0.6.5a11","0.6.5a12","0.6.5a13","0.6.5a2","0.6.5a3","0.6.5a4","0.6.5a5","0.6.5a6","0.6.5a7","0.6.5a8","0.6.5a9","0.6.6","0.6.7","0.6.7a1","0.6.7a2","0.6.7a3","0.6.7a5","0.6.8","0.6.9","1.0.0","1.0.0a0","1.0.0a1","1.0.0a10","1.0.0a11","1.0.0a12","1.0.0a13","1.0.0a14","1.0.0a15","1.0.0a17","1.0.0a18","1.0.0a19","1.0.0a2","1.0.0a20","1.0.0a21","1.0.0a22","1.0.0a23","1.0.0a24","1.0.0a25","1.0.0a26","1.0.0a27","1.0.0a28","1.0.0a29","1.0.0a3","1.0.0a30","1.0.0a31","1.0.0a32","1.0.0a33","1.0.0a34","1.0.0a35","1.0.0a36","1.0.0a37","1.0.0a38","1.0.0a39","1.0.0a4","1.0.0a40","1.0.0a41","1.0.0a42","1.0.0a43","1.0.0a44","1.0.0a45","1.0.0a46","1.0.0a47","1.0.0a48","1.0.0a49","1.0.0a5","1.0.0a50","1.0.0a51","1.0.0a52","1.0.0a53","1.0.0a55","1.0.0a56","1.0.0a57","1.0.0a58","1.0.0a59","1.0.0a6","1.0.0a60","1.0.0a61","1.0.0a7","1.0.0a8","1.0.0a9","1.0.0rc0","1.0.0rc1","1.0.1","1.0.10","1.0.11","1.0.12","1.0.13","1.0.14","1.0.15","1.0.16","1.0.17","1.0.18","1.0.19","1.0.19.post1","1.0.19.post2","1.0.2","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8","1.0.9","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.4.post1","1.2.0","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.4.0","1.4.1","1.4.2","1.4.3","1.5.0","1.5.0.post1","1.5.0.post2","1.5.1","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.6.9","1.7.0","1.7.1","1.7.2","1.7.3"],"databaseSpecific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/langflow/PYSEC-2026-1525.yaml"},"modified":"2026-07-07T17:46:36.796519977Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-1525","modified":"2026-07-07T17:46:36.796519977Z","url":"https://osv.dev/vulnerability/PYSEC-2026-1525"}]}],"pocCandidates":[{"url":"https://github.com/affix/CVE-2026-0770-PoC","source":"poc-in-github","sourceId":"CVE-2026-0770","description":"Proof of Concept for CVE-2026-0770 - Langflow Remote Code Execution","modified":"2026-08-16T06:47:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/affix/CVE-2026-0770-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-08-16T06:47:00Z","url":"https://github.com/affix/CVE-2026-0770-PoC"}],"tags":[]},{"url":"https://github.com/0xgh057r3c0n/CVE-2026-0770","source":"poc-in-github","sourceId":"CVE-2026-0770","description":"Langflow Remote Code Execution (RCE) Proof-of-Concept","modified":"2026-03-02T14:10:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/0xgh057r3c0n/CVE-2026-0770"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-03-02T14:10:01Z","url":"https://github.com/0xgh057r3c0n/CVE-2026-0770"}],"tags":[]},{"url":"https://github.com/Yetazyyy/CVE-2026-0770","source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-03-09T17:03:18Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/Yetazyyy/CVE-2026-0770"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-03-09T17:03:18Z","url":"https://github.com/Yetazyyy/CVE-2026-0770"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-0770","source":"poc-in-github","sourceId":"CVE-2026-0770","description":"CVE-2026-0770","modified":"2026-04-15T10:37:53Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/0xBlackash/CVE-2026-0770"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-04-15T10:37:53Z","url":"https://github.com/0xBlackash/CVE-2026-0770"}],"tags":[]},{"url":"https://github.com/Ez4rd1x1/CVE-2026-0770","source":"poc-in-github","sourceId":"CVE-2026-0770","description":"LangFlow RCE | CVE-2026-0770 | Proof-Of-Concept","modified":"2026-05-15T07:16:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/Ez4rd1x1/CVE-2026-0770"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-05-15T07:16:16Z","url":"https://github.com/Ez4rd1x1/CVE-2026-0770"}],"tags":[]},{"url":"https://github.com/diamorphine666/CVE-2026-0770","source":"poc-in-github","sourceId":"CVE-2026-0770","description":"Langflow remote code execution exploit","modified":"2026-05-23T21:28:06Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/diamorphine666/CVE-2026-0770"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-05-23T21:28:06Z","url":"https://github.com/diamorphine666/CVE-2026-0770"}],"tags":[]},{"url":"https://github.com/razureink/cve-2026-0770-langflow_rce_reproduction","source":"poc-in-github","sourceId":"CVE-2026-0770","description":"CVE Reproduction: cve-2026-0770-langflow_rce_reproduction","modified":"2026-07-23T03:46:24Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0770","url":"https://github.com/razureink/cve-2026-0770-langflow_rce_reproduction"},{"source":"poc-in-github","sourceId":"CVE-2026-0770","modified":"2026-07-23T03:46:24Z","url":"https://github.com/razureink/cve-2026-0770-langflow_rce_reproduction"}],"tags":[]}],"cataloguedPoc":[{"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_rce_cve_2026_0770.rb","source":"metasploit","sourceId":"exploit/multi/http/langflow_rce_cve_2026_0770","description":"Langflow Unauthenticated RCE (validate endpoint)","modified":"2026-09-07 21:49:25 +0000","kind":"metasploit","verification":"catalogued","origins":[{"source":"metasploit","sourceId":"exploit/multi/http/langflow_rce_cve_2026_0770","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_rce_cve_2026_0770.rb"},{"source":"metasploit","sourceId":"exploit/multi/http/langflow_rce_cve_2026_0770","modified":"2026-09-07 21:49:25 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_rce_cve_2026_0770.rb"}],"tags":[]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"3a8abdf7bf79","url":"https://vulncheck.com/xdb/3a8abdf7bf79","cve":"CVE-2026-0770","dateAdded":"2026-02-10T02:50:43Z","modified":"2026-02-14T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/affix/CVE-2026-0770-PoC","observations":[{"dateAdded":"2026-02-10T02:50:43Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"3a8abdf7bf79","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/xdb/3a8abdf7bf79"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"ed26e7d7f607","url":"https://vulncheck.com/xdb/ed26e7d7f607","cve":"CVE-2026-0770","dateAdded":"2026-02-24T20:28:03Z","modified":"2026-02-14T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/0xgh057r3c0n/CVE-2026-0770","observations":[{"dateAdded":"2026-02-24T20:28:03Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"ed26e7d7f607","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/xdb/ed26e7d7f607"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"51c91dc96eca","url":"https://vulncheck.com/xdb/51c91dc96eca","cve":"CVE-2026-0770","dateAdded":"2026-05-15T19:20:40Z","modified":"2026-02-14T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Ez4rd1x1/CVE-2026-0770","observations":[{"dateAdded":"2026-05-15T19:20:40Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"51c91dc96eca","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/xdb/51c91dc96eca"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"99197d5fc80f","url":"https://vulncheck.com/xdb/99197d5fc80f","cve":"CVE-2026-0770","dateAdded":"2026-06-04T21:23:44Z","modified":"2026-02-14T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/diamorphine666/CVE-2026-0770","observations":[{"dateAdded":"2026-06-04T21:23:44Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"99197d5fc80f","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/xdb/99197d5fc80f"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-02-14T00:00:00Z","modified":"2026-02-14T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Langflow","product":"Langflow","dueDate":"2026-07-24T00:00:00Z","cisaDateAdded":"2026-07-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","modified":"2026-02-14T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","catalog":"VulnCheck KEV","kind":"report","url":"https://www.labs.greynoise.io/grimoire/2026-02-13-weekly-oast-report/","dateAdded":"2026-02-14T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","url":"https://www.labs.greynoise.io/grimoire/2026-02-13-weekly-oast-report/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","catalog":"VulnCheck KEV","kind":"report","url":"https://www.labs.greynoise.io/grimoire/2026-02-20-weekly-oast-report/","dateAdded":"2026-02-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","url":"https://www.labs.greynoise.io/grimoire/2026-02-20-weekly-oast-report/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.previdian.com/cve-2026-0770-exploited-in-the-wild-langflow-rce-added-to-cisa-kev/","dateAdded":"2026-07-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","url":"https://blog.previdian.com/cve-2026-0770-exploited-in-the-wild-langflow-rce-added-to-cisa-kev/"},{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","url":"https://previdian.com/CVE-2026-0770"},{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","catalog":"VulnCheck KEV","kind":"report","url":"https://www.resecurity.com/es/blog/article/exploiting-langflows-validatecode-endpoint-for-remote-code-execution","dateAdded":"2026-07-29T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","url":"https://www.resecurity.com/es/blog/article/exploiting-langflows-validatecode-endpoint-for-remote-code-execution"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape","dateAdded":"2026-08-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","catalog":"VulnCheck KEV","kind":"report","url":"https://www.acn.gov.it/portale/documents/20119/1300791/Operational_Summary_lug26_CLEAR.pdf/88b05799-3e4c-f3ed-4a42-d9e68e080604?t=1787220905144","dateAdded":"2026-08-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","url":"https://www.acn.gov.it/portale/documents/20119/1300791/Operational_Summary_lug26_CLEAR.pdf/88b05799-3e4c-f3ed-4a42-d9e68e080604?t=1787220905144"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","catalog":"VulnCheck KEV","kind":"report","url":"https://expel.com/blog/the-ai-cve-exploitation-evidence-story-headlines-are-scarier-than-reality/","dateAdded":"2026-08-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","url":"https://expel.com/blog/the-ai-cve-exploitation-evidence-story-headlines-are-scarier-than-reality/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","catalog":"VulnCheck KEV","kind":"report","url":"https://www.vulncheck.com/blog/pwning-the-ai-stack","dateAdded":"2026-08-28T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0770","url":"https://www.vulncheck.com/blog/pwning-the-ai-stack"}]}]}