{"vulnerability": "cve-2026-0770", "sightings": [{"uuid": "1be0dd04-d088-41ca-912e-cd7749415924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfkkg736ie2h", "content": "", "creation_timestamp": "2026-02-23T21:02:56.766849Z"}, {"uuid": "d782bc23-e131-4c3f-89d8-fe040f08b255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meyx52yyyq24", "content": "", "creation_timestamp": "2026-02-16T21:02:35.491960Z"}, {"uuid": "2d780887-47f2-4db7-9fdf-7ad343ad1eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-036/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "fa2ce237-16c2-4e7e-bbd2-d12f2a4f1fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zecuky22h", "content": "", "creation_timestamp": "2026-01-23T05:57:21.406560Z"}, {"uuid": "a7327b7c-3a0a-42be-875b-539dbaea0f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3bcrstqg2c", "content": "", "creation_timestamp": "2026-01-23T08:19:39.092219Z"}, {"uuid": "666e1605-344b-495a-8495-eef7fb778343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "Telegram/PYoXNzyZrYaKFbj-BEEJp3q5SxJy9E0IbGus7zdCQfw4dWs", "content": "", "creation_timestamp": "2026-04-03T15:00:07.000000Z"}, {"uuid": "7d771b01-bb47-41cb-b5f9-1d6465f8403a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "Telegram/tjgrzpu_dxl6dwKI7zyqcFMKKJNj87hWK2Sc-mpFVOelTAw", "content": "", "creation_timestamp": "2026-05-15T09:00:04.000000Z"}, {"uuid": "f5115db6-06de-45b0-8bc8-f97afbe04ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/85607", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0770\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a diamorphine666\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-23 21:28:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLangflow remote code execution exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-23T22:00:06.000000Z"}, {"uuid": "f363a062-3b27-48de-96bb-c812b7398eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "Telegram/aIPIWoZyEYzzX9nHUVKB1aA0s_e1mj3mQ8Eug10fFDw9pT4", "content": "", "creation_timestamp": "2026-05-24T03:00:05.000000Z"}, {"uuid": "4bc43e3e-b67a-454a-9471-da7a122f9602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2244", "content": "\ud83d\udd34 CISA orders urgent action on actively exploited Langflow RCE flaw\n\nThe Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents.\n\nTracked as CVE-2026-0770, this critical security flaw allows unauthenticated threat actors to gain remote code execution as root in low-complexity attacks.\n\n\"The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint,\" Trend Micro researchers who found and reported the flaw explain. \"The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root.\"", "creation_timestamp": "2026-08-21T23:00:07.996251Z"}, {"uuid": "edb57ddc-0288-4f25-af7c-3c8113d36b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2244", "content": "\ud83d\udd34 CISA orders urgent action on actively exploited Langflow RCE flaw\n\nThe Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents.\n\nTracked as CVE-2026-0770, this critical security flaw allows unauthenticated threat actors to gain remote code execution as root in low-complexity attacks.\n\n\"The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint,\" Trend Micro researchers who found and reported the flaw explain. \"The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root.\"", "creation_timestamp": "2026-08-22T00:00:11.585985Z"}, {"uuid": "7a23b4cf-e595-4439-b27c-da405be30b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtlvkbh6is2i", "content": "\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001DD-WRT\u3001Langflow\u3001WordPress\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09 \u306f\u3001DD-WRT\u3001Langflow\u3001WordPress\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u4ee5\u4e0b\u306f\u3001KeV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u305f\u4e0d\u5177\u5408\u3067\u3059\u3002\n\nCVE-2021-27137  \uff08CVSS\u30b9\u30b3\u30a28.1\uff09DD-WRT\u30b9\u30bf\u30c3\u30af\u30d9\u30fc\u30b9\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\nCVE-2026-0770  \uff08CVSS\u30b9\u30b3\u30a29.8\uff09...", "creation_timestamp": "2026-08-21T13:47:29.118662Z"}, {"uuid": "5fc84c8c-eefd-4b8a-ae59-a81348339892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31536", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T14:00:04.168487Z"}, {"uuid": "c1c13203-3262-44ef-af39-7c281880f99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31537", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T14:00:04.480830Z"}, {"uuid": "627693d4-2bc2-4400-859d-bd5932d6d70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mq5v5znyg627", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-0770: Langflow affected by Remote Code Execution via validate_code() exec()\nEPSS 10.4% \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-0770\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-08T19:47:45.153973Z"}, {"uuid": "9c92bedc-3936-4152-8cc6-6af85712bb02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31536", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:24.566472Z"}, {"uuid": "f586dd02-5f62-4c29-864d-cd20b13d8923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31537", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:24.864735Z"}, {"uuid": "3399c286-09f5-4db0-989a-1d9828c231c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-11T10:15:03.035484Z"}, {"uuid": "565b28a9-c3aa-466f-bcfb-fc0c3b82cd68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mti6hy6gdc2k", "content": "CISA Adds Four Known Exploited Vulnerabilities to Catalog\nRelease Date July 21, 2026\n\nCVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability\nCVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability  \nCVE-2026-63030 WordPress Core Interpretation Confli...", "creation_timestamp": "2026-08-20T02:16:35.879143Z"}, {"uuid": "63c87abe-6ab6-47a1-90a3-01a3b88c090b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-12T10:15:03.101561Z"}, {"uuid": "7a84fd9f-fff5-4095-8f18-c360780301bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-13T10:15:02.838324Z"}, {"uuid": "ab3d7390-4463-4824-9517-2b2801c31513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-14T10:15:02.242274Z"}, {"uuid": "4bc067a7-4c43-4b7c-95e8-9fa486576b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-15T10:15:02.069033Z"}, {"uuid": "ec7a5609-a2ee-43f8-a300-9046f0339346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-16T10:15:02.672688Z"}, {"uuid": "c7a0a822-e78e-4b0e-92a2-a670d0a03665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17215", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:29.267027Z"}, {"uuid": "1da918e1-ff85-432f-a850-59129ac89cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/340", "content": "CVE-2026-0770\n\nLangflow execglobals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the execglobals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.\n\nGitHub Link:\nhttps://github.com/0xBlackash/CVE-2026-0770", "creation_timestamp": "2026-08-28T00:00:30.252727Z"}, {"uuid": "beda7939-603c-441c-845f-fdd977224f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2244", "content": "\ud83d\udd34 CISA orders urgent action on actively exploited Langflow RCE flaw\n\nThe Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents.\n\nTracked as CVE-2026-0770, this critical security flaw allows unauthenticated threat actors to gain remote code execution as root in low-complexity attacks.\n\n\"The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint,\" Trend Micro researchers who found and reported the flaw explain. \"The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root.\"", "creation_timestamp": "2026-08-23T00:00:45.041969Z"}, {"uuid": "5594f0cb-bbda-409a-9026-3f0c019c1d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/cve0day/340", "content": "CVE-2026-0770\n\nLangflow execglobals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the execglobals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.\n\nGitHub Link:\nhttps://github.com/0xBlackash/CVE-2026-0770", "creation_timestamp": "2026-08-27T15:00:10.833836Z"}, {"uuid": "1fa7ffb9-736a-4f4a-b7e7-fb7f50df1a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mr62lublc32n", "content": "\ud83d\uded1 CVE-2026-0770\nLangflow Langflow\nCVSS 9.8 / EPSS 10% / KEV: No\nTL;DR: Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code\u2026\nhttps://cvesentinel.com/report/CVE-2026-0770?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-21T14:50:10.137933Z"}, {"uuid": "5b8be159-3bf5-4e8d-bee3-7f0bc09202a3", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9e5179f7-4d70-4117-8b26-4c5a3c8279d6", "content": "", "creation_timestamp": "2026-07-21T15:00:01.821853Z"}, {"uuid": "8e62f250-0be6-4972-b570-85ccb93b8a91", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bef6a0e7-c26d-47ce-8300-4036ec3b51a2", "content": "", "creation_timestamp": "2026-07-21T15:00:39.030797Z"}, {"uuid": "57883425-5e1e-4c6f-9d63-ac2889c3a80e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog", "content": "", "creation_timestamp": "2026-07-21T16:15:05.038046Z"}, {"uuid": "3abe9e75-b3a6-427a-9821-6b7a47f9c547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr6ac7fvu42w", "content": "CISA added four flaws to its KEV catalog, including WordPress RCE (CVE-2026-63030) and Langflow RCE (CVE-2026-0770). All are exploited in the wild.\n\n#CISA #KEV #WordPress #Langflow #DDWRT #RCE #SQLInjection", "creation_timestamp": "2026-07-21T16:32:08.395527Z"}, {"uuid": "28b3cbfc-80bd-46a0-ae53-eb01bcaf6e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mr7p4tlja52j", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-0770: \u26a0\ufe0f CVE-2026-0770: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 10.4%\nActively exploited\n\nRead the full alert: https://dashboard-webapp-c10t.onrender.com/alerts/2026-0770-langflow-exec_globals-inclusion-of-functionality-from", "creation_timestamp": "2026-07-22T06:30:13.865019Z"}, {"uuid": "df9bee0d-835f-472c-8832-992ad4131927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mra4oigbiu2f", "content": "\u26a0\ufe0f CRITICAL THREAT: CVE-2026-0770 in Langflow enables remote code execution via untrusted control sphere inclusion. Active exploitation is confirmed. Get the forensic detection and input hardening strategies required to secure your AI pipelines today. https://thecybermind.co/aigl\n\n#CyberSecurity\u2026", "creation_timestamp": "2026-07-22T10:32:45.112974Z"}, {"uuid": "800e4943-3188-41fe-95e7-d1510f6a54f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrafl34qzu2r", "content": "Langflow's 'validate' endpoint just produced its SECOND unauthenticated root RCE in 14 months. CVE-2026-0770, CVSS 9.8, now in CISA's KEV list with a 3-day federal deadline. 220+ exploit attempts already logged. Patch, then pull it off the internet.", "creation_timestamp": "2026-07-22T13:11:54.371129Z"}, {"uuid": "7a1c970b-e267-4dfe-ac5a-271f1450c207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrafrem5ec2o", "content": "CISA ordered urgent patching of CVE-2026-0770 in Langflow, a critical flaw enabling unauthenticated root RCE via validate and exec_globals. KEVIntel saw 220+ attacks from 64 IPs. #Langflow #CISA #AWS", "creation_timestamp": "2026-07-22T13:15:25.728087Z"}, {"uuid": "41d2c7dd-51a2-4075-a117-e9bc9d1a1008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116964653150323533", "content": "\ud83d\udcf0 CISA Adds Four Actively Exploited Flaws in DD-WRT, Langflow, WordPress\nCISA adds 4 actively exploited vulnerabilities to its KEV catalog: CVE-2021-27137 (DD-WRT), CVE-2026-0770 (Langflow), and CVE-2026-63030 & CVE-2026-60137 (WordPress). Patching is urgent. #CISA #KEV #Vulnerability #PatchNow #WordPress\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-four-actively-exploited-vulnerabilities-in-dd-wrt-langflow-wordpress-to-kev-catalog/?utm_s\u2026", "creation_timestamp": "2026-07-22T16:49:32.063587Z"}, {"uuid": "7dfe2ac0-1213-4400-9828-a26fe112988a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mrarr25fd22q", "content": "CISA adds 4 actively exploited vulnerabilities to its KEV catalog: CVE-2021-27137 (DD-WRT), CVE-2026-0770 (Langflow), and CVE-2026-63030 & CVE-2026-60137 (WordPress). Patching is urgent. #CISA #KEV #Vulnerability #PatchNow #WordPress\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-22T16:49:59.712005Z"}, {"uuid": "646d2505-5635-4079-b0a7-89b8966eb885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mrbasknvyw2p", "content": "CISA just issued a binding directive: patch the critical Langflow RCE flaw (CVE-2026-0770) by Friday. This isn't a one-off; it's another sign of a deeper design problem in AI platforms handling user code. Are you vulnerable?\n\nhttps://www.tpp.blog/wr6pfey\n\n#cybersecurity #cisa #langflow", "creation_timestamp": "2026-07-22T21:19:17.411497Z"}, {"uuid": "a167540f-2003-447a-94b1-fd41f6f8c160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/GithubRedTeam/94744", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-0770-langflow_rce_reproduction\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a razureink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 03:46:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE Reproduction: cve-2026-0770-langflow_rce_reproduction\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T06:00:03.954772Z"}, {"uuid": "28a52641-db0a-4cd4-9341-88bf8d8ac7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0770", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mrcerxjdwq2z", "content": "\ud83d\udcf0 CISA Perintahkan Patch Mendesak untuk Celah RCE Langflow yang Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/23/cisa-patch-cve-2026-0770-langflow-rce/\n\n#cisa #cve-2026-0770 #cybersecurity #keamananSiber #langflow #rce", "creation_timestamp": "2026-07-23T08:03:10.676617Z"}, {"uuid": "42b7cf1a-096e-4c01-8a9a-3431133b36e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/cyberupdates365.bsky.social/post/3mrchnwoczk2l", "content": "CISA has added the critical Langflow AI framework RCE (CVE-2026-0770) to its Known Exploited Vulnerabilities catalog. Threat actors are weaponizing this flaw to harvest cloud credentials and deploy ENCFORGE ransomware against AI models :\ncyberupdates365.com/cisa-orders-...\n#InfoSec #DevSecOps #AI", "creation_timestamp": "2026-07-23T08:54:41.072640Z"}, {"uuid": "0b03cfed-daa1-4ecc-bde6-eb989170b080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "Telegram/lyQjgrzss-14q92fKQzooVmz9KnQq83SmXqNbV8WBn3n-CQ", "content": "", "creation_timestamp": "2026-07-23T11:00:03.637119Z"}, {"uuid": "1547ab02-4681-4132-b031-9f0b0ad8c13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "Telegram/lyQjgrzss-14q92fKQzooVmz9KnQq83SmXqNbV8WBn3n-CQ", "content": "", "creation_timestamp": "2026-07-24T00:00:08.860254Z"}, {"uuid": "b6ebdb5a-7dfc-4045-a06a-4a4e40e75d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94744", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-0770-langflow_rce_reproduction\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a razureink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 03:46:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE Reproduction: cve-2026-0770-langflow_rce_reproduction\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:09.903704Z"}, {"uuid": "3e1538b6-6b4b-4d5f-ba25-eef90545dd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mrf7jryknu2t", "content": "(CISA TS-SOC) CVE-2026-0770 \u2013 Langflow Inclusion of Functionality from Untrusted Control Sphere\u00a0Vulnerability\n\nSeverity: UNKNOWN Impact Summary: Remote attackers can execute arbitrary code on affected installations. Timestamp: 2026-07-24T01:31:37.336Z ATT&CK Mapping\u2026...", "creation_timestamp": "2026-07-24T11:07:07.474199Z"}, {"uuid": "a0ea4ab1-da12-4318-811f-732acb5f8b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17215", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:04.318045Z"}, {"uuid": "359542a1-03a6-4e8a-8427-4a12aaec5885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/C10_CVE/3", "content": "CVE-2026-0770 C10-Team", "creation_timestamp": "2026-09-01T14:00:05.147148Z"}, {"uuid": "e2c2825b-8ee4-440a-9b3e-c1919fac4386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/C10_CVE/3", "content": "CVE-2026-0770 C10-Team", "creation_timestamp": "2026-09-02T01:05:06.169810Z"}, {"uuid": "6158109d-a6ea-4490-9b0a-7d2f176b3e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://t.me/true_secator/8572", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-0768) \u0432 Langflow, \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0418\u0418, \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u043a\u043b\u044e\u0447\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0432\u0430\u043b\u0438\u0434\u0430\u0442\u043e\u0440\u0435 \u043a\u043e\u0434\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Langflow.\n\nVulnCheck \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u0445 \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u0430\u043b\u0438 \u0446\u0435\u043b\u044c\u044e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 50 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430 \u0437\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u0449\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u0434\u043e 360.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0438 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043b\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Langflow, \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 AWS \u0438 \u043a\u043b\u044e\u0447\u0435\u0439 API OpenAI.\n\nLangflow - \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u00a0\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0418\u0418, \u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u0447\u0430\u0442-\u0431\u043e\u0442\u043e\u0432 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e (RAG).\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435, \u0441\u043e\u0435\u0434\u0438\u043d\u044f\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043e\u043a, \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445, API \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\nCVE-2026-0768 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Langflow 1.4.2 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 Zero Day Initiative \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\nCVE-2026-0768 - \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0443\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-33017, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 Python \u0438 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432 .ENV \u0438 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u0430 \u044d\u0442\u0438\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c\u00a0CVE-2026-5027\u00a0\u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 CVE-2026-55255\u00a0\u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c \u0418\u0418 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u043e\u0432 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0CVE-2026-0770\u00a0\u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0438 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0438 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438\u00a0CVE-2026-9198\u00a0\u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Langflow \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, 1.11.6, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u0441\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430.", "creation_timestamp": "2026-09-02T23:00:05.159655Z"}, {"uuid": "ecd98deb-26c2-4bf6-9de0-dcf155da339f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://t.me/true_secator/8572", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-0768) \u0432 Langflow, \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0418\u0418, \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u043a\u043b\u044e\u0447\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0432\u0430\u043b\u0438\u0434\u0430\u0442\u043e\u0440\u0435 \u043a\u043e\u0434\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Langflow.\n\nVulnCheck \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u0445 \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u0430\u043b\u0438 \u0446\u0435\u043b\u044c\u044e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 50 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430 \u0437\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u0449\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u0434\u043e 360.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0438 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043b\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Langflow, \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 AWS \u0438 \u043a\u043b\u044e\u0447\u0435\u0439 API OpenAI.\n\nLangflow - \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u00a0\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0418\u0418, \u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u0447\u0430\u0442-\u0431\u043e\u0442\u043e\u0432 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e (RAG).\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435, \u0441\u043e\u0435\u0434\u0438\u043d\u044f\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043e\u043a, \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445, API \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\nCVE-2026-0768 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Langflow 1.4.2 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 Zero Day Initiative \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\nCVE-2026-0768 - \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0443\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-33017, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 Python \u0438 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432 .ENV \u0438 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u0430 \u044d\u0442\u0438\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c\u00a0CVE-2026-5027\u00a0\u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 CVE-2026-55255\u00a0\u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c \u0418\u0418 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u043e\u0432 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0CVE-2026-0770\u00a0\u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0438 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0438 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438\u00a0CVE-2026-9198\u00a0\u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Langflow \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, 1.11.6, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u0441\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430.", "creation_timestamp": "2026-09-03T00:00:35.676271Z"}, {"uuid": "09fa0c02-a1ce-4ea7-b2bd-a9527862d310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/exoduscn/12549", "content": "LangFlow RCE Vulnerability", "creation_timestamp": "2026-09-03T05:00:06.560495Z"}, {"uuid": "461919f1-9710-4cc1-acda-12a2c9bbc44a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/exoduscn/12549", "content": "LangFlow RCE Vulnerability", "creation_timestamp": "2026-09-04T00:01:01.339607Z"}, {"uuid": "d0e6cd00-4aec-4816-a2d0-cd3eae47afa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/xssf_forum/122", "content": "\ud83d\udcdd \u041d\u0435\u043c\u043d\u043e\u0433\u043e \u043e \u0436\u0438\u0437\u043d\u0438, pivoting \u0438 Langflow CVE-2026-0770.\n\u0421\u0442\u0430\u0442\u044c\u0438\n\n\u041d\u0435 \u0435\u0434\u0438\u043d\u043e\u0436\u0434\u044b \u0434\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043c\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u0440\u0435\u0431\u044f\u0442\u0430\u043c\u0438 \u0438\u0437 \u043e\u0434\u043d\u043e\u0439 \u043e\u0441\u0443\u0436\u0434\u0430\u0435\u043c\u043e\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0441\u0444\u0435\u0440\u044b. \u0417\u0430\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u043e\u043d\u0438 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0434\u0435\u043d\u044c\u0433\u0438. \u0420\u0430\u0431\u043e\u0442\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0441\u0435\u0442\u044f\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u043d\u0435\u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d \u0417\u0430\u043f\u0430\u0434\u0430. \u0427\u0435\u0441\u0442\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044f \u0431\u044b\u043b \u0432 \u0430\u0445\u0443\u0435 \u043e\u0442 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a\u0438\u0435 \u0441\u0443\u043c\u043c\u044b \u0437\u0430\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0442\u043e\u0432\u0430\u0440\u0438\u0449\u0438, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438 \u043a\u0430\u043a \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0410 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u043e\u043d\u0438 \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u2026\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435", "creation_timestamp": "2026-09-04T05:00:07.018955Z"}, {"uuid": "c03366cd-ae5e-4673-97d2-cc462eb5bc31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/xssf_forum/122", "content": "\ud83d\udcdd \u041d\u0435\u043c\u043d\u043e\u0433\u043e \u043e \u0436\u0438\u0437\u043d\u0438, pivoting \u0438 Langflow CVE-2026-0770.\n\u0421\u0442\u0430\u0442\u044c\u0438\n\n\u041d\u0435 \u0435\u0434\u0438\u043d\u043e\u0436\u0434\u044b \u0434\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043c\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u0440\u0435\u0431\u044f\u0442\u0430\u043c\u0438 \u0438\u0437 \u043e\u0434\u043d\u043e\u0439 \u043e\u0441\u0443\u0436\u0434\u0430\u0435\u043c\u043e\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0441\u0444\u0435\u0440\u044b. \u0417\u0430\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u043e\u043d\u0438 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0434\u0435\u043d\u044c\u0433\u0438. \u0420\u0430\u0431\u043e\u0442\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0441\u0435\u0442\u044f\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u043d\u0435\u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d \u0417\u0430\u043f\u0430\u0434\u0430. \u0427\u0435\u0441\u0442\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044f \u0431\u044b\u043b \u0432 \u0430\u0445\u0443\u0435 \u043e\u0442 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a\u0438\u0435 \u0441\u0443\u043c\u043c\u044b \u0437\u0430\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0442\u043e\u0432\u0430\u0440\u0438\u0449\u0438, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438 \u043a\u0430\u043a \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0410 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u043e\u043d\u0438 \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u2026\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435", "creation_timestamp": "2026-09-05T01:00:40.575714Z"}, {"uuid": "f4ef3acf-3a25-445e-bbb2-4946812355d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/133", "content": "\ud83d\udea8 CVE-2026-0770 | \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 Langflow\n\n\u26a0\ufe0f \u0627\u0644\u062e\u0637\u0648\u0631\u0629: 9.8/10 (\u062d\u0631\u062c\u0629 \u062c\u062f\u0627\u064b)\n\ud83d\udcc5 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641: \u064a\u0648\u0646\u064a\u0648 2026 | CISA \u0623\u0636\u0627\u0641\u062a\u0647\u0627: 21 \u064a\u0648\u0644\u064a\u0648 2026\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u2753 \u0645\u0627 \u0647\u064a Langflow\u061f\n\u0645\u0646\u0635\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0644\u0628\u0646\u0627\u0621 AI Agents \u0648\u062e\u0637\u0648\u0637 \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644 (Workflows) \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 LLMs.\n\n\u2753 \u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0646\u0642\u0637\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0643\u0648\u062f /api/v1/validate/code \u0643\u0627\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 exec() \u0628\u062f\u0644 compile() \u0641\u0642\u0637.\n\n\u0627\u0644\u0647\u0627\u0643\u0631 \u064a\u0631\u0633\u0644 \u0643\u0648\u062f Python \u0628\u0633\u064a\u0637 \u2014 \u0627\u0644\u0645\u0646\u0635\u0629 \"\u062a\u0641\u062d\u0635\u0647\" \u2014 \u0648\u0627\u0644\u0643\u0648\u062f \u064a\u0646\u0641\u0630 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b!\n\n\ud83d\udca1 \u0645\u062b\u0627\u0644 \u0628\u0633\u064a\u0637:\ndef pwn(x=import('os').system('id')):\n    pass\n\n\u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \"\u0645\u0627 \u064a\u062a\u0645 \u0627\u0633\u062a\u062f\u0639\u0627\u0624\u0647\" \u2014 \u0628\u0633 \u062a\u0639\u0631\u064a\u0641\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0645\u0631 id \u0639\u0644\u0649 \u0627\u0644\u0633\u064a\u0631\u0641\u0631!\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd34 \u0644\u0645\u0627\u0630\u0627 \u062e\u0637\u064a\u0631\u0629\u061f\n\u2022 \u0644\u0627 \u062a\u062d\u062a\u0627\u062c \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644 (Unauthenticated)\n\u2022 \u0637\u0644\u0628 POST \u0648\u0627\u062d\u062f \u0643\u0627\u0641\u064a\n\u2022 \u062a\u0646\u0641\u0630 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0641\u064a \u0627\u0644\u063a\u0627\u0644\u0628\n\u2022 \u062a\u0633\u0631\u0642: \u0645\u0641\u0627\u062a\u064a\u062d AWS\u060c \u0628\u064a\u0627\u0646\u0627\u062a Kubernetes\u060c \u0645\u062a\u063a\u064a\u0631\u0627\u062a \u0627\u0644\u0628\u064a\u0626\u0629\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udee1 \u0627\u0644\u062d\u0645\u0627\u064a\u0629:\n1\ufe0f\u20e3 \u062d\u062f\u0651\u062b Langflow \u0644\u0640 1.10.1 \u0641\u0648\u0631\u0627\u064b\n2\ufe0f\u20e3 \u0627\u0641\u062d\u0635 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0644\u0640 /api/v1/validate/code \u0645\u0646\u0630 27 \u064a\u0648\u0646\u064a\u0648\n3\ufe0f\u20e3 \u063a\u064a\u0651\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u0648\u0627\u0644\u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629\n4\ufe0f\u20e3 \u0644\u0627 \u062a\u0639\u0631\u0636 Langflow \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0645\u0641\u062a\u0648\u062d\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udcca \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u0647\u062c\u0648\u0645 (Attack Chain):\n1. \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0633\u064a\u0631\u0641\u0631\u0627\u062a Langflow \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629\n2. \u0625\u0631\u0633\u0627\u0644 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0644\u0644\u062a\u062d\u0642\u0642\n3. \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0646\u0638\u0627\u0645\n4. \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0640 Cloud\n5. \u0646\u0634\u0631 Malware \u0623\u0648 Cryptominer", "creation_timestamp": "2026-09-13T20:00:05.112473Z"}, {"uuid": "31ef10a9-6783-4344-b9e2-704c51029397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/132", "content": "\ud83d\udea8 CVE-2026-0770 | \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 Langflow\n\n\u26a0\ufe0f \u0627\u0644\u062e\u0637\u0648\u0631\u0629: 9.8/10 (\u062d\u0631\u062c\u0629 \u062c\u062f\u0627\u064b)\n\ud83d\udcc5 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641: \u064a\u0648\u0646\u064a\u0648 2026 | CISA \u0623\u0636\u0627\u0641\u062a\u0647\u0627: 21 \u064a\u0648\u0644\u064a\u0648 2026\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u2753 \u0645\u0627 \u0647\u064a Langflow\u061f\n\u0645\u0646\u0635\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0644\u0628\u0646\u0627\u0621 AI Agents \u0648\u062e\u0637\u0648\u0637 \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644 (Workflows) \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 LLMs.\n\n\u2753 \u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0646\u0642\u0637\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0643\u0648\u062f /api/v1/validate/code \u0643\u0627\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 exec() \u0628\u062f\u0644 compile() \u0641\u0642\u0637.\n\n\u0627\u0644\u0647\u0627\u0643\u0631 \u064a\u0631\u0633\u0644 \u0643\u0648\u062f Python \u0628\u0633\u064a\u0637 \u2014 \u0627\u0644\u0645\u0646\u0635\u0629 \"\u062a\u0641\u062d\u0635\u0647\" \u2014 \u0648\u0627\u0644\u0643\u0648\u062f \u064a\u0646\u0641\u0630 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b!\n\n\ud83d\udca1 \u0645\u062b\u0627\u0644 \u0628\u0633\u064a\u0637:\ndef pwn(x=import('os').system('id')):\n    pass\n\n\u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \"\u0645\u0627 \u064a\u062a\u0645 \u0627\u0633\u062a\u062f\u0639\u0627\u0624\u0647\" \u2014 \u0628\u0633 \u062a\u0639\u0631\u064a\u0641\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0645\u0631 id \u0639\u0644\u0649 \u0627\u0644\u0633\u064a\u0631\u0641\u0631!\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd34 \u0644\u0645\u0627\u0630\u0627 \u062e\u0637\u064a\u0631\u0629\u061f\n\u2022 \u0644\u0627 \u062a\u062d\u062a\u0627\u062c \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644 (Unauthenticated)\n\u2022 \u0637\u0644\u0628 POST \u0648\u0627\u062d\u062f \u0643\u0627\u0641\u064a\n\u2022 \u062a\u0646\u0641\u0630 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0641\u064a \u0627\u0644\u063a\u0627\u0644\u0628\n\u2022 \u062a\u0633\u0631\u0642: \u0645\u0641\u0627\u062a\u064a\u062d AWS\u060c \u0628\u064a\u0627\u0646\u0627\u062a Kubernetes\u060c \u0645\u062a\u063a\u064a\u0631\u0627\u062a \u0627\u0644\u0628\u064a\u0626\u0629\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udee1 \u0627\u0644\u062d\u0645\u0627\u064a\u0629:\n1\ufe0f\u20e3 \u062d\u062f\u0651\u062b Langflow \u0644\u0640 1.10.1 \u0641\u0648\u0631\u0627\u064b\n2\ufe0f\u20e3 \u0627\u0641\u062d\u0635 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0644\u0640 /api/v1/validate/code \u0645\u0646\u0630 27 \u064a\u0648\u0646\u064a\u0648\n3\ufe0f\u20e3 \u063a\u064a\u0651\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u0648\u0627\u0644\u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629\n4\ufe0f\u20e3 \u0644\u0627 \u062a\u0639\u0631\u0636 Langflow \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0645\u0641\u062a\u0648\u062d\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udcca \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u0647\u062c\u0648\u0645 (Attack Chain):\n1. \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0633\u064a\u0631\u0641\u0631\u0627\u062a Langflow \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629\n2. \u0625\u0631\u0633\u0627\u0644 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0644\u0644\u062a\u062d\u0642\u0642\n3. \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0646\u0638\u0627\u0645\n4. \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0640 Cloud\n5. \u0646\u0634\u0631 Malware \u0623\u0648 Cryptominer\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd17 \u0627\u0644\u0645\u0635\u062f\u0631: resecurity.com\n\ud83d\udce4 \u0634\u0627\u0631\u0643 \u0645\u0639 \u0641\u0631\u064a\u0642 DevOps/Security \u0639\u0646\u062f\u0643\n\ud83d\udcac \u0647\u0644 \u062a\u0633\u062a\u062e\u062f\u0645 Langflow\u061f \u0627\u0643\u062a\u0628 \u0644\u0646\u0627 \ud83d\udc47\n\n#CVE2026_0770 #Langflow #RCE #Cybersecurity t.me/CYPERMRED", "creation_timestamp": "2026-09-13T20:00:05.151414Z"}, {"uuid": "e7f1da9c-4722-4911-afd4-9634f1fdde2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/133", "content": "\ud83d\udea8 CVE-2026-0770 | \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 Langflow\n\n\u26a0\ufe0f \u0627\u0644\u062e\u0637\u0648\u0631\u0629: 9.8/10 (\u062d\u0631\u062c\u0629 \u062c\u062f\u0627\u064b)\n\ud83d\udcc5 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641: \u064a\u0648\u0646\u064a\u0648 2026 | CISA \u0623\u0636\u0627\u0641\u062a\u0647\u0627: 21 \u064a\u0648\u0644\u064a\u0648 2026\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u2753 \u0645\u0627 \u0647\u064a Langflow\u061f\n\u0645\u0646\u0635\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0644\u0628\u0646\u0627\u0621 AI Agents \u0648\u062e\u0637\u0648\u0637 \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644 (Workflows) \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 LLMs.\n\n\u2753 \u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0646\u0642\u0637\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0643\u0648\u062f /api/v1/validate/code \u0643\u0627\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 exec() \u0628\u062f\u0644 compile() \u0641\u0642\u0637.\n\n\u0627\u0644\u0647\u0627\u0643\u0631 \u064a\u0631\u0633\u0644 \u0643\u0648\u062f Python \u0628\u0633\u064a\u0637 \u2014 \u0627\u0644\u0645\u0646\u0635\u0629 \"\u062a\u0641\u062d\u0635\u0647\" \u2014 \u0648\u0627\u0644\u0643\u0648\u062f \u064a\u0646\u0641\u0630 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b!\n\n\ud83d\udca1 \u0645\u062b\u0627\u0644 \u0628\u0633\u064a\u0637:\ndef pwn(x=import('os').system('id')):\n    pass\n\n\u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \"\u0645\u0627 \u064a\u062a\u0645 \u0627\u0633\u062a\u062f\u0639\u0627\u0624\u0647\" \u2014 \u0628\u0633 \u062a\u0639\u0631\u064a\u0641\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0645\u0631 id \u0639\u0644\u0649 \u0627\u0644\u0633\u064a\u0631\u0641\u0631!\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd34 \u0644\u0645\u0627\u0630\u0627 \u062e\u0637\u064a\u0631\u0629\u061f\n\u2022 \u0644\u0627 \u062a\u062d\u062a\u0627\u062c \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644 (Unauthenticated)\n\u2022 \u0637\u0644\u0628 POST \u0648\u0627\u062d\u062f \u0643\u0627\u0641\u064a\n\u2022 \u062a\u0646\u0641\u0630 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0641\u064a \u0627\u0644\u063a\u0627\u0644\u0628\n\u2022 \u062a\u0633\u0631\u0642: \u0645\u0641\u0627\u062a\u064a\u062d AWS\u060c \u0628\u064a\u0627\u0646\u0627\u062a Kubernetes\u060c \u0645\u062a\u063a\u064a\u0631\u0627\u062a \u0627\u0644\u0628\u064a\u0626\u0629\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udee1 \u0627\u0644\u062d\u0645\u0627\u064a\u0629:\n1\ufe0f\u20e3 \u062d\u062f\u0651\u062b Langflow \u0644\u0640 1.10.1 \u0641\u0648\u0631\u0627\u064b\n2\ufe0f\u20e3 \u0627\u0641\u062d\u0635 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0644\u0640 /api/v1/validate/code \u0645\u0646\u0630 27 \u064a\u0648\u0646\u064a\u0648\n3\ufe0f\u20e3 \u063a\u064a\u0651\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u0648\u0627\u0644\u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629\n4\ufe0f\u20e3 \u0644\u0627 \u062a\u0639\u0631\u0636 Langflow \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0645\u0641\u062a\u0648\u062d\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udcca \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u0647\u062c\u0648\u0645 (Attack Chain):\n1. \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0633\u064a\u0631\u0641\u0631\u0627\u062a Langflow \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629\n2. \u0625\u0631\u0633\u0627\u0644 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0644\u0644\u062a\u062d\u0642\u0642\n3. \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0646\u0638\u0627\u0645\n4. \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0640 Cloud\n5. \u0646\u0634\u0631 Malware \u0623\u0648 Cryptominer", "creation_timestamp": "2026-09-14T00:00:11.166321Z"}, {"uuid": "6e3a158b-e662-45b2-aff3-6ba47266d041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/132", "content": "\ud83d\udea8 CVE-2026-0770 | \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 Langflow\n\n\u26a0\ufe0f \u0627\u0644\u062e\u0637\u0648\u0631\u0629: 9.8/10 (\u062d\u0631\u062c\u0629 \u062c\u062f\u0627\u064b)\n\ud83d\udcc5 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641: \u064a\u0648\u0646\u064a\u0648 2026 | CISA \u0623\u0636\u0627\u0641\u062a\u0647\u0627: 21 \u064a\u0648\u0644\u064a\u0648 2026\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u2753 \u0645\u0627 \u0647\u064a Langflow\u061f\n\u0645\u0646\u0635\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0644\u0628\u0646\u0627\u0621 AI Agents \u0648\u062e\u0637\u0648\u0637 \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644 (Workflows) \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 LLMs.\n\n\u2753 \u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0646\u0642\u0637\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0643\u0648\u062f /api/v1/validate/code \u0643\u0627\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 exec() \u0628\u062f\u0644 compile() \u0641\u0642\u0637.\n\n\u0627\u0644\u0647\u0627\u0643\u0631 \u064a\u0631\u0633\u0644 \u0643\u0648\u062f Python \u0628\u0633\u064a\u0637 \u2014 \u0627\u0644\u0645\u0646\u0635\u0629 \"\u062a\u0641\u062d\u0635\u0647\" \u2014 \u0648\u0627\u0644\u0643\u0648\u062f \u064a\u0646\u0641\u0630 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b!\n\n\ud83d\udca1 \u0645\u062b\u0627\u0644 \u0628\u0633\u064a\u0637:\ndef pwn(x=import('os').system('id')):\n    pass\n\n\u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \"\u0645\u0627 \u064a\u062a\u0645 \u0627\u0633\u062a\u062f\u0639\u0627\u0624\u0647\" \u2014 \u0628\u0633 \u062a\u0639\u0631\u064a\u0641\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0645\u0631 id \u0639\u0644\u0649 \u0627\u0644\u0633\u064a\u0631\u0641\u0631!\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd34 \u0644\u0645\u0627\u0630\u0627 \u062e\u0637\u064a\u0631\u0629\u061f\n\u2022 \u0644\u0627 \u062a\u062d\u062a\u0627\u062c \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644 (Unauthenticated)\n\u2022 \u0637\u0644\u0628 POST \u0648\u0627\u062d\u062f \u0643\u0627\u0641\u064a\n\u2022 \u062a\u0646\u0641\u0630 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0641\u064a \u0627\u0644\u063a\u0627\u0644\u0628\n\u2022 \u062a\u0633\u0631\u0642: \u0645\u0641\u0627\u062a\u064a\u062d AWS\u060c \u0628\u064a\u0627\u0646\u0627\u062a Kubernetes\u060c \u0645\u062a\u063a\u064a\u0631\u0627\u062a \u0627\u0644\u0628\u064a\u0626\u0629\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udee1 \u0627\u0644\u062d\u0645\u0627\u064a\u0629:\n1\ufe0f\u20e3 \u062d\u062f\u0651\u062b Langflow \u0644\u0640 1.10.1 \u0641\u0648\u0631\u0627\u064b\n2\ufe0f\u20e3 \u0627\u0641\u062d\u0635 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0644\u0640 /api/v1/validate/code \u0645\u0646\u0630 27 \u064a\u0648\u0646\u064a\u0648\n3\ufe0f\u20e3 \u063a\u064a\u0651\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u0648\u0627\u0644\u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629\n4\ufe0f\u20e3 \u0644\u0627 \u062a\u0639\u0631\u0636 Langflow \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0645\u0641\u062a\u0648\u062d\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udcca \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u0647\u062c\u0648\u0645 (Attack Chain):\n1. \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0633\u064a\u0631\u0641\u0631\u0627\u062a Langflow \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629\n2. \u0625\u0631\u0633\u0627\u0644 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0644\u0644\u062a\u062d\u0642\u0642\n3. \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0646\u0638\u0627\u0645\n4. \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0640 Cloud\n5. \u0646\u0634\u0631 Malware \u0623\u0648 Cryptominer\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd17 \u0627\u0644\u0645\u0635\u062f\u0631: resecurity.com\n\ud83d\udce4 \u0634\u0627\u0631\u0643 \u0645\u0639 \u0641\u0631\u064a\u0642 DevOps/Security \u0639\u0646\u062f\u0643\n\ud83d\udcac \u0647\u0644 \u062a\u0633\u062a\u062e\u062f\u0645 Langflow\u061f \u0627\u0643\u062a\u0628 \u0644\u0646\u0627 \ud83d\udc47\n\n#CVE2026_0770 #Langflow #RCE #Cybersecurity t.me/CYPERMRED", "creation_timestamp": "2026-09-14T00:00:11.216318Z"}]}