Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-0770 — Langflow Remote Code Execution (RCE) Proof-of-Concept | Kitploit
Tools/GitHubGitHub/0xgh057r3c0n/cve-2026-0770
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationRemote Access Trojan
GitHub0xgh057r3c0n/cve-2026-0770

CVE-2026-0770

Langflow Remote Code Execution (RCE) Proof-of-Concept

View Repository
176 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

🚀 CVE-2026-0770 – Langflow RCE (exec_global) PoC

Remote Code Execution vulnerability in Langflow

📌 Affected Software

This vulnerability affects:

Langflow

🧠 Vulnerability Overview

CVE-2026-0770 is a Remote Code Execution (RCE) vulnerability in the:

root@kitploit:~
/api/v1/validate/code

endpoint.

When AUTO_LOGIN=true and default credentials are enabled, attackers can:

  • 🔓 Bypass authentication
  • 💻 Execute arbitrary system commands
  • ⚠️ Fully compromise the server

The issue stems from unsafe Python code evaluation during validation.

Download Tool

⚙️ Installation

1️⃣ Clone the Repository

root@kitploit:~
git clone https://github.com/0xgh057r3c0n/CVE-2026-0770.git
cd CVE-2026-0770

2️⃣ Install Requirements

Make sure Python 3.8+ is installed.

Install dependencies:

root@kitploit:~
pip install requests colorama

(Optional) Use Virtual Environment

root@kitploit:~
python3 -m venv venv
source venv/bin/activate      # Linux / macOS
venv\Scripts\activate         # Windows
pip install requests colorama

🚀 Usage Guide

🔥 Interactive Shell Mode

Launch interactive remote command execution:

root@kitploit:~
python3 CVE-2026-0770.py -t http://target:7860

Example:

root@kitploit:~
python3 CVE-2026-0770.py -t http://192.168.1.100:7860

🧪 Execute Single Command

root@kitploit:~
python3 CVE-2026-0770.py -t http://target:7860 -c "id"

Example:

root@kitploit:~
python3 CVE-2026-0770.py -t http://localhost:7860 -c "whoami"

🧾 Verbose Mode

root@kitploit:~
python3 CVE-2026-0770.py -t http://target:7860 -c "ls -la" -v

Shows detailed debugging output.

🔐 Use Custom JWT Token

root@kitploit:~
python3 CVE-2026-0770.py -t http://target:7860 -k "your.jwt.token"

🔐 Authentication Behavior

If no token is provided, the script attempts auto-login using:

root@kitploit:~
username: langflow
password: langflow

If successful, it retrieves an access_token and proceeds.

💣 Exploitation Flow

  1. Attempt authentication
  2. Send malicious Python payload
  3. Trigger execution during function definition
  4. Raise exception containing command output
  5. Parse output from server response

🛡️ Mitigation

Administrators should:

  • Disable AUTO_LOGIN
  • Change default credentials immediately
  • Restrict access to /api/v1/validate/code
  • Implement secure sandboxing
  • Upgrade to a patched version (if available)

🔍 Detection Indicators

Monitor for:

  • Suspicious POST requests to /api/v1/validate/code

  • Code containing:

    • __import__
    • subprocess
    • throw(Exception(

  • Repeated login attempts using default credentials

📂 Project Structure

root@kitploit:~
.
├── CVE-2026-0770.py
├── LICENSE
└── README.md

👤 Author

0xgh057r3c0n 🔗 https://github.com/0xgh057r3c0n

Security Researcher | Exploit Developer | PoC Writer

📜 License

Distributed under the MIT License. See the full license here:

🔗 https://github.com/0xgh057r3c0n/CVE-2026-0770/blob/main/LICENSE

⚠️ Legal Disclaimer

This project is intended for:

  • Security research
  • Educational purposes
  • Authorized penetration testing

Unauthorized use against systems you do not own or have explicit permission to test is illegal.