CVE-2026-0771

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0771", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "state": "PUBLISHED", "assignerShortName": "zdi", "dateReserved": "2026-01-08T22:50:28.413Z", "datePublished": "2026-01-23T03:28:56.528Z", "dateUpdated": "2026-02-26T14:44:26.158Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2026-01-23T03:28:56.528Z"}, "title": "Langflow PythonFunction Code Injection Remote Code Execution Vulnerability", "descriptions": [{"lang": "en", "value": "Langflow PythonFunction Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Attack vectors and exploitability will vary depending on the configuration of the product.\n\nThe specific flaw exists within the handling of Python function components. Depending upon product configuration, an attacker may be able to introduce custom Python code into a workflow. An attacker can leverage this vulnerability to execute code in the context of the application. Was ZDI-CAN-27497."}], "affected": [{"vendor": "Langflow", "product": "Langflow", "versions": [{"version": "1.4.2", "status": "affected"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-94", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", "type": "CWE"}]}], "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-037/", "name": "ZDI-26-037", "tags": ["x_research-advisory"]}], "dateAssigned": "2026-01-08T22:50:28.436Z", "datePublic": "2026-01-09T16:38:40.667Z", "source": {"lang": "en", "value": "Peter Girnus (@gothburz), William Gamazo Sanchez, and Alfredo Oliveira of Trend Research"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.1, "baseSeverity": "HIGH"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0771", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-24T04:55:33.963690Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T14:44:26.158Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0771", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-24T04:55:33.963690Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-23T16:30:35.851Z"}}], "cna": {"title": "Langflow PythonFunction Code Injection Remote Code Execution Vulnerability", "source": {"lang": "en", "value": "Peter Girnus (@gothburz), William Gamazo Sanchez, and Alfredo Oliveira of Trend Research"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "Langflow", "product": "Langflow", "versions": [{"status": "affected", "version": "1.4.2"}], "defaultStatus": "unknown"}], "datePublic": "2026-01-09T16:38:40.667Z", "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-037/", "name": "ZDI-26-037", "tags": ["x_research-advisory"]}], "dateAssigned": "2026-01-08T22:50:28.436Z", "descriptions": [{"lang": "en", "value": "Langflow PythonFunction Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Attack vectors and exploitability will vary depending on the configuration of the product.\n\nThe specific flaw exists within the handling of Python function components. Depending upon product configuration, an attacker may be able to introduce custom Python code into a workflow. An attacker can leverage this vulnerability to execute code in the context of the application. Was ZDI-CAN-27497."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2026-01-23T03:28:56.528Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0771", "state": "PUBLISHED", "dateUpdated": "2026-02-26T14:44:26.158Z", "dateReserved": "2026-01-08T22:50:28.413Z", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "datePublished": "2026-01-23T03:28:56.528Z", "assignerShortName": "zdi"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Langflow", "vendor": "Langflow", "versions": [{"status": "affected", "version": "1.4.2"}]}], "source": "zdi-disclosures@trendmicro.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:langflow:langflow:1.4.2:-:*:*:*:*:*:*", "matchCriteriaId": "81AAA7F9-843A-456C-89A1-B99D18AD4328", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Langflow PythonFunction Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Attack vectors and exploitability will vary depending on the configuration of the product.\n\nThe specific flaw exists within the handling of Python function components. Depending upon product configuration, an attacker may be able to introduce custom Python code into a workflow. An attacker can leverage this vulnerability to execute code in the context of the application. Was ZDI-CAN-27497."}, {"lang": "es", "value": "Vulnerabilidad de Inyecci\u00f3n de C\u00f3digo PythonFunction de Langflow con Ejecuci\u00f3n Remota de C\u00f3digo. Esta vulnerabilidad permite a atacantes remotos ejecutar c\u00f3digo arbitrario en instalaciones afectadas de Langflow. Los vectores de ataque y la explotabilidad variar\u00e1n dependiendo de la configuraci\u00f3n del producto.\n\nLa falla espec\u00edfica existe dentro del manejo de los componentes de funci\u00f3n Python. Dependiendo de la configuraci\u00f3n del producto, un atacante podr\u00eda ser capaz de introducir c\u00f3digo Python personalizado en un flujo de trabajo. Un atacante puede aprovechar esta vulnerabilidad para ejecutar c\u00f3digo en el contexto de la aplicaci\u00f3n. Fue ZDI-CAN-27497."}], "id": "CVE-2026-0771", "lastModified": "2026-06-17T10:11:21.250", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0771", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-24T04:55:33.963690Z", "version": "2.0.3"}}]}, "published": "2026-01-23T04:16:04.200", "references": [{"source": "zdi-disclosures@trendmicro.com", "tags": ["Third Party Advisory"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-037/"}], "sourceIdentifier": "zdi-disclosures@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T03:15:56.171398+00:00", "value": {"mitigation_remediation": ["Upgrade Langflow to a version that contains the fix for the Python function component flaw.", "Reconfigure the application to disable or restrict custom Python code entry in workflows, mitigating the injection avenue.", "Monitor application logs for abnormal execution of Python code to detect potential exploitation attempts."], "summary": {"action": "Apply Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "Langflow version 1.4.2 is affected, according to the CPE identifier. No other versions are explicitly listed; users running this or earlier versions should verify vendor advisories for additional impacted releases.", "description_and_impact": "A flaw in Langflow's handling of Python function components permits attackers to inject custom Python code, resulting in the execution of arbitrary code within the application\u2019s context. This weakness aligns with CWE\u201194, which covers incorrect handling of dynamic code execution. The impact is the loss of integrity and availability for the affected system, as malicious code can be run with the application\u2019s privileges.", "risk_and_exploitability": "The CVSS score for this vulnerability is 7.1, indicating a high severity level. The EPSS score of less than 1% implies a low current exploitation probability, and the vulnerability is not included in the CISA KEV catalog. The likely attack vector is remote, through the configuration of Python function components in a workflow, and exploitation is contingent on the product\u2019s configuration settings. Based on the description, it is inferred that an attacker can inject code by creating or modifying a workflow that contains a Python function component."}}}}, "created": "2026-01-23T10:26:35.852162+00:00", "updated": "2026-04-18T03:30:25.898489+00:00", "vendors": ["langflow", "langflow$PRODUCT$langflow"]}