THREATOPS

THREAT OPS › CVEs › CVE-2026-0770

CVE-2026-0770 — Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

CISA KEVExploited: confirmedLangflow

Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations.

Vulnerability details

Affected productsLangflow
KEV remediation due2026-07-24

Related reporting

July 2026 CVE Landscaperecordedfuture
CISA Adds Four Known Exploited Vulnerabilities to Catalogcisa_advisories
[CISA KEV] CVE-2026-0770 — Langflow Langflow: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerabilitycisa_kev