Langflow Remote Code Execution Vulnerability Exploited in Attacks (CVE-2026-0768)

A vulnerability impacting Langflow is being exploited in the wild. Tracked as CVE-2026-0768, the vulnerability has a critical severity rating with a CVSS score of 9.8. Successful exploitation of the vulnerability may allow a remote attacker to execute arbitrary code on affected installations of Langflow.

Peter Girnus, William Gamazo Sanchez, and Alfredo Oliveira of Trend Research have discovered and reported the vulnerability to Langflow.

Langflow is an open-source, low-code platform that uses a visual, drag-and-drop interface to build, prototype, and deploy AI applications and workflows. It enables users to connect components like large language models (LLMs), vector databases, APIs, and custom logic into functional AI systems without extensive coding.

Vulnerability Details

The vulnerability lies in the code validator within Langflow’s custom component editor. The flaw stems from how the code parameter is handled in the validate endpoint. A user-supplied string is not properly validated before it is used to execute Python code, allowing an attacker to execute code with root privileges.

Active exploitation

VulnCheck detected the activity on its U.K. honeypots, with traffic originating primarily from Russia. The observed activity is recon plus credential harvesting: attacker requests query environment variables (LANGFLOW_SUPERUSER, OPENAI_API*, AWS_ACCESS*, AWS_SECRET*), read/root/.cache/langflow/secret_key, and check .ssh access and .bash_history size. As per VulnCheck, there are no known public proof-of-concept exploits.

CVE-2026-0768 isn’t the first Langflow vulnerability that was exploited this year. CVE-2026-33017 was the first vulnerability in Langflow that was exploited in March this year. Followed by CVE-2026-5027 and CVE-2026-55255 in June and July 2026, respectively.

Affected Versions

The vulnerability affects the Langflow versions before 1.4.2.

Mitigation

Langflow has not released any advisory to address the vulnerability at the time of writing.

Qualys Detection

Qualys customers can scan their devices with QID 735263 to detect vulnerable assets.

Please continue to follow Qualys Threat Protection for more coverage of the latest vulnerabilities.

References
https://www.zerodayinitiative.com/advisories/ZDI-26-034/