CVE-2026-0772

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0772", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "state": "PUBLISHED", "assignerShortName": "zdi", "dateReserved": "2026-01-08T22:50:32.955Z", "datePublished": "2026-01-23T03:29:01.133Z", "dateUpdated": "2026-02-26T14:44:25.873Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2026-01-23T03:29:01.133Z"}, "title": "Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability", "descriptions": [{"lang": "en", "value": "Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the disk cache service. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-27919."}], "affected": [{"vendor": "Langflow", "product": "Langflow", "versions": [{"version": "1.5.0.post2", "status": "affected"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-502", "description": "CWE-502: Deserialization of Untrusted Data", "type": "CWE"}]}], "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-038/", "name": "ZDI-26-038", "tags": ["x_research-advisory"]}], "dateAssigned": "2026-01-08T22:50:32.981Z", "datePublic": "2026-01-09T16:39:18.274Z", "source": {"lang": "en", "value": "Peter Girnus (@gothburz), Brandon Niemczyk of Trend Zero Day Initiative"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.5, "baseSeverity": "HIGH"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0772", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-24T04:55:36.228186Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T14:44:25.873Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0772", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-24T04:55:36.228186Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-23T16:28:54.972Z"}}], "cna": {"title": "Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability", "source": {"lang": "en", "value": "Peter Girnus (@gothburz), Brandon Niemczyk of Trend Zero Day Initiative"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "Langflow", "product": "Langflow", "versions": [{"status": "affected", "version": "1.5.0.post2"}], "defaultStatus": "unknown"}], "datePublic": "2026-01-09T16:39:18.274Z", "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-038/", "name": "ZDI-26-038", "tags": ["x_research-advisory"]}], "dateAssigned": "2026-01-08T22:50:32.981Z", "descriptions": [{"lang": "en", "value": "Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the disk cache service. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-27919."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-502", "description": "CWE-502: Deserialization of Untrusted Data"}]}], "providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2026-01-23T03:29:01.133Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0772", "state": "PUBLISHED", "dateUpdated": "2026-02-26T14:44:25.873Z", "dateReserved": "2026-01-08T22:50:32.955Z", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "datePublished": "2026-01-23T03:29:01.133Z", "assignerShortName": "zdi"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Langflow", "vendor": "Langflow", "versions": [{"status": "affected", "version": "1.5.0.post2"}]}], "source": "zdi-disclosures@trendmicro.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:langflow:langflow:1.5.0:dev2:*:*:*:*:*:*", "matchCriteriaId": "D9126CC7-6E41-43A5-8988-BB2755F74AD0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the disk cache service. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-27919."}, {"lang": "es", "value": "Vulnerabilidad de Ejecuci\u00f3n Remota de C\u00f3digo por Deserializaci\u00f3n de Datos No Confiables en la Cach\u00e9 de Disco de Langflow. Esta vulnerabilidad permite a atacantes remotos ejecutar c\u00f3digo arbitrario en instalaciones afectadas de Langflow. Se requiere autenticaci\u00f3n para explotar esta vulnerabilidad.\n\nLa falla espec\u00edfica existe dentro del servicio de cach\u00e9 de disco. El problema resulta de la falta de validaci\u00f3n adecuada de los datos proporcionados por el usuario, lo que puede resultar en la deserializaci\u00f3n de datos no confiables. Un atacante puede aprovechar esta vulnerabilidad para ejecutar c\u00f3digo en el contexto de la cuenta de servicio. Fue ZDI-CAN-27919."}], "id": "CVE-2026-0772", "lastModified": "2026-06-17T10:11:21.353", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.6, "impactScore": 5.9, "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0772", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-24T04:55:36.228186Z", "version": "2.0.3"}}]}, "published": "2026-01-23T04:16:04.333", "references": [{"source": "zdi-disclosures@trendmicro.com", "tags": ["Third Party Advisory"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-038/"}], "sourceIdentifier": "zdi-disclosures@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T18:56:44.241494+00:00", "value": {"mitigation_remediation": ["Upgrade to the latest Langflow release that patches the deserialization bug.", "Temporarily disable the disk caching feature or clear existing cache files to stop untrusted data from being deserialized.", "Implement strict input validation or sanitize any data that reaches the cache to exclude malicious payloads, addressing the underlying deserialization weakness (CWE\u2011502).", "Restrict user privileges to the minimum necessary and monitor for anomalous behavior after authentication."], "summary": {"action": "Patch ASAP", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "The vulnerability is present in Langflow version 1.5.0 dev2. All installations running this exact release or earlier versions that have not applied the patch are susceptible. No other versions are listed as affected in the current advisory.", "description_and_impact": "Langflow\u2019s disk cache service contains a vulnerability that allows remote attackers to trigger deserialization of untrusted data. The flaw arises because the service does not validate user\u2011supplied input before deserializing it. If an attacker can supply crafted data to the cache, they can run arbitrary code with the privileges of the service account. The issue requires the attacker to be authenticated, but once credentials are available, the code execution path is straightforward. According to CVSS, this flaw is scored 7.5, reflecting a high\u2011impact remote code execution scenario. This flaw falls under CWE\u2011502, indicating a deserialization vulnerability.", "risk_and_exploitability": "The CVSS score of 7.5 places this vulnerability in the high severity range, but its EPSS score of around 1% indicates a relatively low probability of widespread exploitation at present. The vulnerability is not listed in the CISA KEV catalog, suggesting it has not yet been widely abused. Exploitability requires valid user credentials, meaning attackers need to compromise or impersonate an account with access to the disk cache. Even with authentication, the code runs with service\u2011account privileges, potentially giving the attacker full control over the deployment. Security teams should treat this as a high\u2011risk issue while monitoring for activity that matches the exploit pattern."}}}}, "created": "2026-01-23T10:27:01.073639+00:00", "updated": "2026-04-18T19:00:08.043254+00:00", "vendors": ["langflow", "langflow$PRODUCT$langflow"]}