CRITICALCVSS 9.8Actively exploited · CISA KEV since 2026-07-21Vulnerability
CVE-2026-0770
Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations.
Properties
- Vulnerability name
- Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
- Epss score
- 0.62562
- Last seen
- 2026-10-19T12:00:27+00:00
- Due date
- 2026-07-24
- Exploited euvd since
- 2026-07-21T00:00:00+00:00
- Date added
- 2026-07-21
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Ghsa updated
- 2026-02-19T22:09:33Z
- Euvd base score version
- 3.0
- Score
- 9.8
- Euvd vendor
- Langflow, langflow-ai
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 9.8
- Is ghsa only
- false
- Vendor project
- Langflow
- Content hash
- 7afd94674f51aa9799ef9639a0d930646083bccf17860cb0eeb0c17ea03c7f91
- Published at
- 2026-01-23T04:16:04.063
- Euvd updated
- 2026-07-22T03:55:44+00:00
- Last modified
- 2026-07-22T05:17:08.693
- Euvd epss pct
- 62.56
Related Entities (6)
AFFECTS (1)
AFFECTS_PRODUCT (1)
DESCRIBES (1)
HAS_WEAKNESS (1)
INVOLVES (1)
MENTIONED_IN (1)
Explore deeper with Ninja Signal's threat intelligence graph