{"schema":"vulnpedia.poc/1","cve":"CVE-2026-5027","generated":"2026-10-26T06:59:15.268Z","kev":null,"epss":{"score":0.39973,"percentile":0.98619},"cvss":{"version":"3.1","score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/29b343b4afaf","executable":false,"sourceId":"29b343b4afaf","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"29b343b4afaf","modified":"2026-06-08T00:00:00Z","url":"https://vulncheck.com/xdb/29b343b4afaf"}],"repositoryUrl":"https://github.com/yahiahamza/CVE-2026-5027"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/812e19ecfa4f","executable":false,"sourceId":"812e19ecfa4f","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"812e19ecfa4f","modified":"2026-06-08T00:00:00Z","url":"https://vulncheck.com/xdb/812e19ecfa4f"}],"repositoryUrl":"https://github.com/EQSTLab/CVE-2026-5027"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/98045a28f25c","executable":false,"sourceId":"98045a28f25c","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"98045a28f25c","modified":"2026-06-08T00:00:00Z","url":"https://vulncheck.com/xdb/98045a28f25c"}],"repositoryUrl":"https://github.com/0xBlackash/CVE-2026-5027"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/77b433ef98f1","executable":false,"sourceId":"77b433ef98f1","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"77b433ef98f1","modified":"2026-06-08T00:00:00Z","url":"https://vulncheck.com/xdb/77b433ef98f1"}],"repositoryUrl":"https://github.com/Layer-6/CVE-2026-5027-Langflow"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/2c600a4ed095","executable":false,"sourceId":"2c600a4ed095","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"2c600a4ed095","modified":"2026-06-08T00:00:00Z","url":"https://vulncheck.com/xdb/2c600a4ed095"}],"repositoryUrl":"https://github.com/rmhowe425/POC-CVE-2026-5027"},{"kind":"exploitdb","id":"52659","url":"https://www.exploit-db.com/exploits/52659","code":"https://www.exploit-db.com/download/52659","executable":true}],"poc_candidates":[{"url":"https://github.com/yahiahamza/CVE-2026-5027","source":"poc-in-github","sourceId":"CVE-2026-5027","description":"CVE-2026-5027 - Langflow Path Traversal to Remote Code Execution (CVSS 8.8)","modified":"2026-04-13T07:15:24Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5027","url":"https://github.com/yahiahamza/CVE-2026-5027"},{"source":"poc-in-github","sourceId":"CVE-2026-5027","modified":"2026-04-13T07:15:24Z","url":"https://github.com/yahiahamza/CVE-2026-5027"}],"tags":[]},{"url":"https://github.com/min8282/CVE-2026-5027","source":"poc-in-github","sourceId":"CVE-2026-5027","description":"Langflow, Remote Code Execution (RCE) via Cron Job Injection through Path Traversal (CVE-2026-5027)","modified":"2026-04-03T12:07:23Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5027","url":"https://github.com/min8282/CVE-2026-5027"},{"source":"poc-in-github","sourceId":"CVE-2026-5027","modified":"2026-04-03T12:07:23Z","url":"https://github.com/min8282/CVE-2026-5027"}],"tags":[]},{"url":"https://github.com/EQSTLab/CVE-2026-5027","source":"poc-in-github","sourceId":"CVE-2026-5027","description":"Langflow, Remote Code Execution (RCE) via Cron Job Injection through Path Traversal","modified":"2026-04-24T06:53:23Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5027","url":"https://github.com/EQSTLab/CVE-2026-5027"},{"source":"poc-in-github","sourceId":"CVE-2026-5027","modified":"2026-04-24T06:53:23Z","url":"https://github.com/EQSTLab/CVE-2026-5027"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-5027","source":"poc-in-github","sourceId":"CVE-2026-5027","description":"CVE-2026-5027","modified":"2026-04-03T17:07:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5027","url":"https://github.com/0xBlackash/CVE-2026-5027"},{"source":"poc-in-github","sourceId":"CVE-2026-5027","modified":"2026-04-03T17:07:37Z","url":"https://github.com/0xBlackash/CVE-2026-5027"}],"tags":[]},{"url":"https://github.com/Layer-6/CVE-2026-5027-Langflow","source":"poc-in-github","sourceId":"CVE-2026-5027","modified":"2026-06-11T11:25:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5027","url":"https://github.com/Layer-6/CVE-2026-5027-Langflow"},{"source":"poc-in-github","sourceId":"CVE-2026-5027","modified":"2026-06-11T11:25:00Z","url":"https://github.com/Layer-6/CVE-2026-5027-Langflow"}],"tags":[]},{"url":"https://github.com/HORKimhab/CVE-2026-5027","source":"poc-in-github","sourceId":"CVE-2026-5027","description":" CVE-2026-5027 - Draft","modified":"2026-08-05T08:13:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5027","url":"https://github.com/HORKimhab/CVE-2026-5027"},{"source":"poc-in-github","sourceId":"CVE-2026-5027","modified":"2026-08-05T08:13:04Z","url":"https://github.com/HORKimhab/CVE-2026-5027"}],"tags":[]},{"url":"https://github.com/yym8538/CVE-2026-5027","source":"poc-in-github","sourceId":"CVE-2026-5027","modified":"2026-09-25T11:50:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5027","url":"https://github.com/yym8538/CVE-2026-5027"},{"source":"poc-in-github","sourceId":"CVE-2026-5027","modified":"2026-09-25T11:50:15Z","url":"https://github.com/yym8538/CVE-2026-5027"}],"tags":[]},{"url":"https://github.com/rmhowe425/POC-CVE-2026-5027","source":"poc-in-github","sourceId":"CVE-2026-5027","description":"Proof of concept exploit code for CVE-2026-5027","modified":"2026-09-22T02:06:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5027","url":"https://github.com/rmhowe425/POC-CVE-2026-5027"},{"source":"poc-in-github","sourceId":"CVE-2026-5027","modified":"2026-09-22T02:06:38Z","url":"https://github.com/rmhowe425/POC-CVE-2026-5027"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-5027 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2026-5027 && searchsploit -m 52659","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-5027/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5027.yaml","template":"http/cves/2026/CVE-2026-5027.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-5027%22&type=repositories","executable":false}]}