Exploit for Code Injection in Langflow

githubexploit · 2026-09-02

Description

Code injection exploit for Langflow (CVE-2026-0768) enables arbitrary code execution.

Langflow= 1.4.2

9.8

HIGH SEVERITY

Version 3.0

VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

100%confidence this exploit runs

Based on 2 file(s) in the source

2.3%higher than 82.4% of all CVEs

Updated 2026-09-02

Modified:2026-09-02 20:46

Last Seen:2026-09-02 20:51

Reporter:rmhowe425

README2 lines

## https://sploitus.com/exploit?id=6A99BAEE-8D01-5E69-9883-D7F902847C8C
# POC-CVE-2026-0768