sign in--:--:--UTC

CVE-2026-0770

exploited in the wild☆ pin

CVSS

—

Reports

7

First seen

Jun 10, 2026

Last seen

Aug 5, 2026

Affected product

Langflow

Associated actors

MuddyWater ×2 Chinese-speaking threat actor ×1 JadePuffer ×1 Lone operator (45.207.216.55) ×1

Recent reports

CISA warns of actively exploited flaws in Langflow, N-central, and Apache Tomcat

Bleeping ComputerAug 5, 2026 High

Windmill Path Traversal Vulnerability (CVE-2026-29059) Actively Exploited in the Wild

The Hacker NewsJul 22, 2026 Critical

CISA Orders Urgent Patching of Actively Exploited Langflow RCE Flaw CVE-2026-0770

Bleeping ComputerJul 22, 2026 High

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesJul 21, 2026 Critical

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog

The Hacker NewsJul 8, 2026 High

Path traversal flaw in Langflow AI platform actively exploited

Bleeping ComputerJun 10, 2026 High

Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE

The Hacker NewsJun 10, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans