[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpHhJrePFqs2RJ3e9SqOUzFlgXppyd629QirzDmAv31c":3},{"article":4,"iocs":52},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":31,"category":32,"article_tags":36},"c005cd51-7d32-48ff-a70b-aff4bc1ffeb2","CISA orders urgent action on actively exploited Langflow RCE flaw","cisa-orders-urgent-action-on-actively-exploited-langflow-rce-flaw-e26cff","The Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents. [...]","CISA has ordered U.S. federal agencies to immediately patch CVE-2026-0770, a critical remote code execution vulnerability in Langflow (a visual framework for building AI agents) that allows unauthenticated attackers to execute code as root. The flaw in the exec_globals parameter handling was discovered by Trend Micro and has been actively exploited since June 27, with over 220 exploitation attempts from 64 unique IPs, including malware deployment and credential theft attempts. Federal agencies must remediate by Friday per Binding Operational Directive BOD 26-04.","CISA orders urgent patching of actively exploited Langflow RCE vulnerability CVE-2026-0770.","CISA orders urgent action on actively exploited Langflow RCE flaw By Sergiu Gatlan July 22, 2026 07:43 AM 0 The Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents. Tracked as CVE-2026-0770, this critical security flaw allows unauthenticated threat actors to gain remote code execution as root in low-complexity attacks. \"The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint,\" Trend Micro researchers who found and reported the flaw explain. \"The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root.\" Vulnerability intelligence company KEVIntel first observed CVE-2026-0770 in-the-wild exploitation on June 27, with over 220 exploitation attempts recorded from 64 unique source IP addresses before CISA included the flaw in its Known Exploited Vulnerabilities (KEV) catalog. KEVIntel founder Ryan Dewhurst told BleepingComputer that the malicious activity targeting the CVE-2026-0770 flaw is not limited to vulnerability checks, with malicious payloads observed during these attacks also attempting to deploy malware and obtain AWS credentials, environment variables, and container metadata. \"Most activity involved command-execution checks or system reconnaissance. However, KEVIntel also observed attempts to download second-stage scripts and access environment variables, cloud metadata and credential files,\" Dewhurst said. \"Organizations operating Langflow should investigate historical requests to \u002Fapi\u002Fv1\u002Fvalidate\u002Fcode, review host activity, restrict access to the validation functionality and rotate exposed credentials where successful execution cannot be ruled out.\" CVE-2026-0770 exploitation attempts (KEVIntel) Federal agencies ordered to take immediate action On Tuesday, CISA added CVE-2026-0770 to its KEV catalog, ordering U.S. Federal Civilian Executive Branch (FCEB) agencies to secure their systems by Friday, as mandated by Binding Operational Directive (BOD) 26-04. \"This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise,\" the cybersecurity agency warned. \"Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\" CISA has flagged other Langflow vulnerabilities as exploited in the wild in recent years, including a missing authentication security issue (CVE-2025-3248) in May 2025, a code injection vulnerability (CVE-2026-33017) in March 2026, and an Insecure Direct Object Reference (IDOR) security flaw (CVE-2026-55255) earlier this month. The cybersecurity agency also confirmed that CVE-2025-3248 is being exploited in ransomware attacks, after cloud security company Sysdig reported that the JadePuffer ransomware gang is using it to dump Langflow PostgreSQL databases. Test every layer before attackers do Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection. Get the whitepaper Related Articles: Critical Langflow RCE flaw exploited to hack AI app serversCISA sets urgent deadline to fix Cisco flaw exploited in attacksCISA orders feds to prioritize patching Langflow auth bypass flawCISA: Microsoft SharePoint RCE flaw now actively exploitedCISA orders feds to patch max severity Joomla plugin flaw by Friday","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fcisa-orders-feds-to-patch-actively-exploited-langflow-rce-flaw\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F07\u002F22\u002FCISA.jpg","2026-07-22T11:43:28+00:00","2026-07-22T12:00:14.325485+00:00",9,[18,21,24,26,29],{"name":19,"type":20},"Langflow","product",{"name":22,"type":23},"CISA","vendor",{"name":25,"type":23},"Trend Micro",{"name":27,"type":28},"JadePuffer","threat_actor",{"name":30,"type":23},"KEVIntel","574f766a-fb3f-487c-8d2c-0720ae75471b",{"id":31,"icon":33,"name":34,"slug":35},null,"Zero-day","zero-day",[37,42,47],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",[53,57,60,63,66],{"type":54,"value":55,"context":56},"cve","CVE-2026-0770","Critical RCE vulnerability in Langflow exec_globals parameter, actively exploited",{"type":54,"value":58,"context":59},"CVE-2025-3248","Langflow missing authentication flaw exploited by JadePuffer ransomware gang",{"type":54,"value":61,"context":62},"CVE-2026-33017","Langflow code injection vulnerability exploited in the wild",{"type":54,"value":64,"context":65},"CVE-2026-55255","Langflow IDOR security flaw exploited in the wild",{"type":67,"value":27,"context":68},"malware","Ransomware gang exploiting Langflow CVE-2025-3248 to dump PostgreSQL databases"]