Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/0xgh057r3c0n/cve-2026-0770
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationRemote Access Trojan
GitHub0xgh057r3c0n/cve-2026-0770

CVE-2026-0770

Langflow Remote Code Execution (RCE) Proof-of-Concept

View Repository
16 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

🚀 CVE-2026-0770 – Langflow RCE (exec_global) PoC

Remote Code Execution vulnerability in Langflow

📌 Affected Software

This vulnerability affects:

Langflow

🧠 Vulnerability Overview

CVE-2026-0770 is a Remote Code Execution (RCE) vulnerability in the:

root@kitploit:~
/api/v1/validate/code

endpoint.

When AUTO_LOGIN=true and default credentials are enabled, attackers can:

  • 🔓 Bypass authentication
  • 💻 Execute arbitrary system commands
  • ⚠️ Fully compromise the server

    • The issue stems from unsafe Python code evaluation during validation.

    ⚙️ Installation

    1️⃣ Clone the Repository

    root@kitploit:~
    git clone https://github.com/0xgh057r3c0n/CVE-2026-0770.git
cd CVE-2026-0770

    2️⃣ Install Requirements

    Make sure Python 3.8+ is installed.

    Install dependencies:

    root@kitploit:~
    pip install requests colorama

    (Optional) Use Virtual Environment

    root@kitploit:~
    python3 -m venv venv
source venv/bin/activate      # Linux / macOS
venv\Scripts\activate         # Windows
pip install requests colorama

    🚀 Usage Guide

    🔥 Interactive Shell Mode

    Launch interactive remote command execution:

    root@kitploit:~
    python3 CVE-2026-0770.py -t http://target:7860

    Example:

    root@kitploit:~
    python3 CVE-2026-0770.py -t http://192.168.1.100:7860

    🧪 Execute Single Command

    root@kitploit:~
    python3 CVE-2026-0770.py -t http://target:7860 -c "id"

    Example:

    root@kitploit:~
    python3 CVE-2026-0770.py -t http://localhost:7860 -c "whoami"

    🧾 Verbose Mode

    root@kitploit:~
    python3 CVE-2026-0770.py -t http://target:7860 -c "ls -la" -v

    Shows detailed debugging output.

    🔐 Use Custom JWT Token

    root@kitploit:~
    python3 CVE-2026-0770.py -t http://target:7860 -k "your.jwt.token"

    🔐 Authentication Behavior

    If no token is provided, the script attempts auto-login using:

    root@kitploit:~
    username: langflow
password: langflow

    If successful, it retrieves an access_token and proceeds.

    💣 Exploitation Flow

    1. Attempt authentication
    2. Send malicious Python payload
    3. Trigger execution during function definition
    4. Raise exception containing command output
    5. Parse output from server response

    🛡️ Mitigation

    Administrators should:

    • Disable AUTO_LOGIN
    • Change default credentials immediately
    • Restrict access to /api/v1/validate/code
    • Implement secure sandboxing
    • Upgrade to a patched version (if available)

    🔍 Detection Indicators

    Monitor for:

    • Suspicious POST requests to /api/v1/validate/code

    • Code containing:

      • __import__
      • subprocess
      • throw(Exception(

    • Repeated login attempts using default credentials

    📂 Project Structure

    root@kitploit:~
    .
├── CVE-2026-0770.py
├── LICENSE
└── README.md

    👤 Author

    0xgh057r3c0n 🔗 https://github.com/0xgh057r3c0n

    Security Researcher | Exploit Developer | PoC Writer

    📜 License

    Distributed under the MIT License. See the full license here:

    🔗 https://github.com/0xgh057r3c0n/CVE-2026-0770/blob/main/LICENSE

    ⚠️ Legal Disclaimer

    This project is intended for:

    • Security research
    • Educational purposes
    • Authorized penetration testing

    Unauthorized use against systems you do not own or have explicit permission to test is illegal.

    Download Tool