Langflow validate/code 存在授权远程代码执行漏洞（CVE-2026-0770）

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.ddpoc.com/DVB-2026-11084.html
• https://github.com/0xgh057r3c0n/CVE-2026-0770
• https://nvd.nist.gov/vuln/detail/CVE-2026-0770
• https://github.com/affix/CVE-2026-0770-PoC
• https://www.sentinelone.com/vulnerability-database/CVE-2026-0770/
• https://s4e.io/tools/langflow-remote-code-execution-via-validate-code-exec-cve-2026-0770
• https://pentest-tools.com/vulnerabilities-exploits/langflow-130-remote-code-execution-via-validate-code-exec_28889

Related Vulnerabilities

• PoClangflow-api-exposure: Langflow - Unauthenticated API Exposure
• PoCCVE-2026-0768: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code
• Langflow /api/v1/custom_component 代码执行漏洞（CVE-2024-37014）
• PoCCVE-2024-37014: Langflow <= 1.0.12 - Remote Code Execution
• IBM Langflow OSS 远程代码执行漏洞（CVE-2026-9198）
• PoCCVE-2026-55450: Langflow < 1.9.1 - Unauthenticated File Upload
• PoCCVE-2026-33497: Langflow < 1.7.0 - Path Traversal
• PoCCVE-2026-9198: IBM Langflow - Remote Code Execution
• Langflow build_public_tmp 代码执行漏洞（CVE-2026-33017）
• PoCCVE-2026-5027: Langflow <= 1.8.4 - Path Traversal to RCE via File Upload
• Langflow /api/v2/files 文件上传漏洞（CVE-2026-5027）
• Langflow /api/v1/validate/code 代码执行漏洞（CVE-2026-0770）
• PoCCVE-2026-33017: Langflow < 1.9.0 - Remote Code Execution