Skip to content
KitploitKITPLOIT
ToolsBlog
Log in
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-27966--RCE-in-Langflow — All-in-one exploit tool for CVE-2026-27966, a critical RCE in Langflow. Features mass scanning, auto-detection, payload execution, interactive shell, proxy support, and user-agent rotation for penetration testing. | Kitploit
Tools/GitHubGitHub/anon-cyber-team/cve-2026-27966--rce-in-langflow
Vulnerability ScannersExploitationWeb Application ExploitationPenetration TestingCommand and ControlRed Teaming
GitHubanon-cyber-team/cve-2026-27966--rce-in-langflow

CVE-2026-27966--RCE-in-Langflow

All-in-one exploit tool for CVE-2026-27966, a critical RCE in Langflow. Features mass scanning, auto-detection, payload execution, interactive shell, proxy support, and user-agent rotation for penetration testing.

View Repository
2277 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

🚀 CVE-2026-27966 - Langflow RCE Exploit Tool

All-in-One Exploitation Tool for CVE-2026-27966

Python Version License Status CVSS

📋 Description

This tool is an all-in-one exploit for CVE-2026-27966, a Remote Code Execution (RCE) vulnerability in Langflow that allows an attacker to execute system commands remotely.

CVSS Score: 9.8 (Critical) 🔥

With this tool, you can:

  • ✅ Mass scan thousands of targets with threading
  • ✅ Automatically detect Langflow instances
  • ✅ Exploit RCE with various payloads
  • ✅ Interactive shell for full control
  • ✅ Proxy support for anonymity
  • ✅ User-Agent rotation to avoid detection

⚙️ Full Features

FiturDeskripsi
Multi-threaded ScannerScan ribuan target dengan thread configurable (default 20)
Smart DetectionDeteksi Langflow dengan multiple endpoint checks
Auto Flow CreationBuat flow otomatis jika tidak ada flow ID
Command ExecutionEksekusi perintah sistem remote
Interactive ShellShell interaktif penuh dengan color output
Proxy SupportHTTP/HTTPS proxy + proxy list dari file
User-Agent Rotation20+ User-Agent untuk menghindari blocking
Output CleaningBersihkan output dari JSON wrapper
Debug ModeLogging detail untuk troubleshooting
Save ResultsSimpan target vulnerable ke file

🛠️ Installation

Clone Repository

git clone https://github.com/alvinhidayatullah/cve-2026-27966-langflow-rce.git
cd cve-2026-27966-langflow-rce

📚 How to Use

Scan single target :

python3 langflow.py -t http://target.com:7860

Scan from file :

python3 langflow.py -f targets.txt

Scan + interactive shell :

python3 langflow.py -t http://target.com:7860 -i
python3 langflow.py -f targets.txt -i

📁 Format File Input

list target domain (targets.txt) :

http://192.168.1.100:7860
https://langflow.company.com
http://10.10.10.50:7860
192.168.1.200:7860

🛡️ Disclaimer & Responsible Use

⚠️ IMPORTANT: This tool is created for educational purposes and security auditing with written permission from the system owner. Use without permission is ILLEGAL and may be subject to criminal penalties.

The author is not responsible for any misuse of this tool. Use it wisely and responsibly!!

⭐ Support

If this tool is useful, don't forget to ⭐ on GitHub!

Happy Ethical Hacking! 🚀

Download Tool