Exploit for Code Injection in Langflow

## https://sploitus.com/exploit?id=DCF80D2B-C6A1-5090-B356-71A1B6079E90
# CVE-2026-0768

## Donate


  
    
      Help maintain this project
      If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile.
      ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។
      ❤️ Ten percent of every donation is contributed to Kantha Bopha Children's Hospital.
    
    
      Choose a payment method
      
      
        
      
      
      
        
      
      
      Scan with ABA Mobile · Click to enlarge
    
  


## ⚡ Simple Usage

Run the latest version of the external download script directly from GitHub:

```bash
bash  This command requires Bash and `curl`. Review the remote script before running it if you do not trust the source.

Use this project only in safe and authorized environments such as:

- Local virtual machines
- Docker containers
- Isolated lab setups
- Authorized penetration testing environments

Example setup & usage:

```bash
# Follow dir every project
```

## Credit or Reference

- CVE-2026-0768-exploitintel: https://github.com/exploitintel/eip-pocs-and-cves/tree/main/CVE-2026-0768
- https://thehackernews.com/2026/09/attackers-exploit-critical-langflow-and.html

---

# 📚 Educational Security Research Repository

A repository for learning, testing, and researching cybersecurity concepts in controlled environments.

---

## ⚠️ Security & Legal Disclaimer

## Purpose

This repository is for **educational and authorized security research only**.

It is designed to help users learn about:

- Security vulnerabilities
- Sandbox and isolation concepts
- Secure coding and defensive practices

---

## Authorized Use Only

Use this repository only in environments where you have permission, such as:

- Personal labs or virtual machines
- Docker or isolated environments
- Authorized penetration testing
- Cybersecurity training or academic research

Unauthorized or illegal use is strictly prohibited.

---

## No Liability

The author and contributors are **not responsible** for any damage, misuse, legal issues, or losses caused by this project.

By using this repository, you agree that:

- You are responsible for your own actions
- You will use it legally and ethically
- The project is provided **without warranty**

---

## Ethical Use

This project is intended for:

- Defensive security research
- Cybersecurity education
- Vulnerability awareness
- Secure system and software research

Please follow responsible disclosure practices and comply with all applicable laws.

---

## Contact

For responsible disclosure or collaboration, contact the repository maintainer through GitHub.

---
## Related Project

Explore the [PoC CVE Collection](https://github.com/HORKimhab/poc-cve-collection "https://github.com/HORKimhab/poc-cve-collection") for additional CVE proof-of-concept resources intended for authorized security research and education.

## Key words 

- Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity, CVE-2026-0768 poc, poc CVE-2026-0768