The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for U.S. government agencies to patch a critical, actively exploited remote code execution (RCE) vulnerability in the Langflow visual framework for building AI agents. The flaw, identified as CVE-2026-0770, was added to CISA's Known Exploited Vulnerabilities (KEV) catalog on Tuesday, July 22, 2026, with federal agencies mandated to secure affected systems by Friday, in accordance with Binding Operational Directive (BOD) 26-04.
Trend Micro researchers discovered and reported CVE-2026-0770, describing it as a critical security flaw that allows unauthenticated attackers to achieve remote code execution as root with low complexity. The vulnerability resides in the handling of the `exec_globals` parameter within the `validate` endpoint, stemming from the inclusion of a resource from an untrusted control sphere. This allows an attacker to execute arbitrary code with root privileges.
Vulnerability intelligence firm KEVIntel first detected in-the-wild exploitation of CVE-2026-0770 on June 27. Since then, KEVIntel has recorded over 220 exploitation attempts originating from 64 distinct IP addresses. Analysis of these attacks indicates that malicious activity extends beyond simple vulnerability checks. Observed payloads include attempts to deploy malware and exfiltrate sensitive information such as AWS credentials, environment variables, and container metadata. Organizations operating Langflow are advised to review historical requests to `/api/v1/validate/code`, investigate host activity, restrict access to the validation functionality, and rotate any exposed credentials if successful execution cannot be definitively ruled out.
CISA emphasized that vulnerabilities of this nature are frequently leveraged by malicious cyber actors and pose significant risks to federal enterprises. Agencies are responsible for assessing the internet exposure of their assets and ensuring compliance with BOD 26-04 patching guidelines.
This is not the first time CISA has flagged Langflow vulnerabilities for active exploitation. The agency previously identified a missing authentication security issue (CVE-2025-3248) in May 2025, a code injection vulnerability (CVE-2026-33017) in March 2026, and an Insecure Direct Object Reference (IDOR) flaw (CVE-2026-55255) earlier in July. CISA also confirmed that CVE-2025-3248 is being exploited in ransomware attacks, with reports from cloud security company Sysdig indicating its use by the JadePuffer ransomware gang to dump Langflow PostgreSQL databases.
