CISA Adds a Second Actively Exploited Langflow RCE to KEV Within Two Weeks (CVE-2026-0770)

Langflow, the visual builder used to assemble AI agents and LLM workflows

CISA added CVE-2026-0770 (CVSS 9.8) to the Known Exploited Vulnerabilities catalog on July 21, 2026, two weeks after adding the Langflow IDOR CVE-2026-55255 to the same catalog. The flaw is unauthenticated remote code execution in the handling of the `exec_globals` parameter on Langflow's validation endpoint, requires no user interaction, and runs code as root. KEVIntel recorded the first in-the-wild exploitation on June 27 and logged more than 220 exploitation attempts from 64 unique source IPs before the KEV listing. Observed payloads went beyond vulnerability checks to deploying malware and harvesting AWS credentials, environment variables, and container metadata

A validation endpoint that evaluates user-supplied code with attacker-controllable globals, exposed on instances that are routinely internet-facing and that hold provider API keys and cloud credentials by design