Vulnerability threat dossier
The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an attacker to write files to arbitrary locations on the filesystem using path traversal sequences ('../').
VTP analyst assessment
Langflow's POST /api/v2/files endpoint permits path traversal through the multipart filename parameter, allowing a low-privileged remote attacker to write files outside the intended location. A primary assertion reports a public exploit template, but its reliability is unestablished. The exploitation-reporting evidence is weak for this CVE because the supplied press summaries discuss CVE-2026-0768 rather than CVE-2026-5027.
4 record references and 4 source references passed trusted post-response validation. The current deterministic record contains 0 independent evidence groups.
The bundle labels exploitation as reported, but the associated source summaries identify a different Langflow CVE; exploitation of CVE-2026-5027 is therefore not corroborated by the supplied text.
The affected version boundaries and exploit template's functional reliability are not supplied.
The required privilege level is stated by the CVSS vector but the exact application role or permission is unspecified.
No first-party sensor telemetry is configured, so VTP observation is unknown.
First-party sensor telemetry is active; no disclosure-eligible deterministic observation is currently public for this CVE. This does not mean no activity was observed.
Confirm vulnerable Langflow versions and access controls on POST /api/v2/files.
VTP deterministic assessment
A proof of concept is reported; functional reliability is not established.
EPSS is 0.36; this is predictive context, not exploitation evidence.
First-party sensor telemetry is active; no disclosure-eligible deterministic observation is currently public for this CVE. This does not mean no activity was observed.
Material change ledger
Claim provenance
0 primary sources · 0 dependent secondary reports · 4 reports with unresolved independence. Repetition remains visible without multiplying confirmation.
Event history
SecurityWeek supplied a deterministically extracted signal; review the linked evidence before escalation.
OffSec Exploit Database published new or materially changed exploit-oriented tooling for this CVE. This is availability evidence, not evidence of exploitation in the wild.
ProjectDiscovery Nuclei Templates Releases published evidence linked to CVE-2026-5027.
Original publications
Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys. [...]
Tracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely. The post Hackers Start Exploiting Critical Langflow Vulnerability appeared first on SecurityWeek .
Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. The vulnerabilities in question are listed below - CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user. CVE-2026-66066 aka
OffSec Exploit Database recorded exploit-tooling coverage changes for 8 CVEs in this pinned revision. 8 have an active availability assertion for this revision. Tooling evidence does not establish exploitation in the wild or successful execution.
New Templates Added: 86 | CVEs Added: 64 | First-time contributions: 22 🔥 Release Highlights 🔥 [ CVE-2026-50751 ] Check Point IKEv1 Remote-Access VPN - Certificate Auth Bypass ( @watchtowr , @dhiyaneshdk ) [critical] (vKEV) 🔥 [ CVE-2026-49777 ] WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE ( @dhiyaneshdk ) [critical] (vKEV) 🔥 [ CVE-2026-48907 ] Joomla! JCE extension < 2.9.99.5 Unauth RCE ( @ywh-jfellus ) [critical] (vKEV) 🔥 [ CVE-2026-48710 ] Starlette - Improper Validation of Unsafe Equivalence in Input ( @ritikchaddha ) [critical] 🔥 [ CVE-2026-44551 ] Open WebUI 'LDAP Empty Password' - Auth Bypass ( @dhiyaneshdk ) [critical] 🔥 [ CVE-2026-44338 ] PraisonAI - Auth Bypass ( @jnoza ) [high] (vKEV) 🔥 [ CVE-2026-44262 ] Scramble Laravel - Remote Code Execution ( @joshuavanderpoll ) [critical] 🔥 [ CVE-2026-42647 ] JoomSport <= 5.7.7 - SQL Injection ( @theamanrawat ) [critical] (vKEV) 🔥 [ CVE-2026-42589 ] Gotenberg - Command Injection ( @fineman999 ) [critical] (vKEV) 🔥 [ CVE-2026-42271 ] LiteLLM - Command Injection ( @ritikchaddha ) [critical] (vKEV) 🔥 [ CVE-2026-42208 ] LiteLLM - SQL Injection ( @HAERIN-L ) [critical] (vKEV) 🔥 [ CVE-2026-35273 ] Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE ( @dhiyaneshdk ) [critical] (vKEV) 🔥 [ CVE-2026-34910 ] UniFi OS Server - Command Injection (@Kazgangap) [critical] (vKEV) 🔥 [ CVE-2026-31431 ] Copy Fail - Linux Kernel Local Privilege Escalation via AF_ALG ( @ritikchaddha ) [high] (vKEV) 🔥 [CVE-2026-29059] Windmill/Nextcloud Flow < 1.603.3 - Unauth Path Traversal (@0x_Akoko) [critical] 🔥 [ CVE-2026-27760 ] OpenCATS - Command Injection ( @theamanrawat ) [high] (vKEV) 🔥 [ CVE-2026-26190 ] Milvus - Unauth Metrics API Access ( @WRG-11 ) [critical] 🔥 [ CVE-2026-22557 ] UniFi Network Application - Path Traversal ( @Aryu-RU ) [critical] 🔥 [ CVE-2026-20253 ] Splunk Enterprise & Cloud Platform - Unrestricted File Upload ( @watchtowrlabs , @dhiyaneshdk ) [critical] (vKEV) 🔥 [ CVE-2026-10795 ] UpdraftPlus WP Backup & Migration Plugin - Auth Bypass ( @theamanrawat , @s4e-io ) [high] (vKEV) 🔥 [ CVE-2026-10520 ] Ivanti Sentry - OS Command Injection ( @dhiyaneshdk ) [critical] (vKEV) 🔥 [ CVE-2026-5073 ] WordPress ARMember Premium <= 7.3.1 - Unauth SQL Injection ( @dhiyaneshdk ) [critical] (vKEV) 🔥 [ CVE-2026-5027 ] Langflow <= 1.8.4 - Path Traversal to RCE via File Upload ( @pussycat0x ) [high] (vKEV) 🔥 [ CVE-2026-4480 ] Samba Printing Subsystem - Remote Code Execution ( @projectdiscovery ) [critical] 🔥 [ CVE-2026-3300 ] Everest Forms Pro <= 1.9.12 - Unauth RCE via Calculation Formula Injection ( @dhiyaneshdk ) [critical] (vKEV) 🔥 [ CVE-2026-3018 ] WordPress Newsletters <= 4.13 - Unauth SQL Injection ( @pussycat0x ) [high] (vKEV) 🔥 [ CVE-2026-0257 ] Palo Alto Networks PAN-OS - Auth Bypass ( @dhiyaneshdk , @sfewer-r7 ) [critical] (vKEV) 🔥 [CVE-2025-49001] DataEase < 2.10.10 - JWT Auth Bypass ( @YunSeoJo , @Aryu-RU ) [critical] 🔥 [ CVE-2025-13773 ] WordPress Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Remote Code Execution ( @PikaJuna-ops ) [critical] (vKEV) 🔥 What's Changed Bug Fixes Fixed invalid double-port URL construction in hpe-autopass-panel where {{Hostname}} was used instead of {{Host}}, producing malformed URLs like hostname:6274:5814/autopass (PR #16316 , Issue #16315 ). Fixed incorrect CVE assignment in a contributed template, correcting the CVE ID to match the actual vulnerability (PR #16397 , Issue #16388 ). Fixed username variable syntax error in CVE-2026-44551 .yaml causing broken authentication attempts (PR #16341 ). Corrected broken reference links in CVE-2020-27361 .yaml (PR #16403 ). Fixed typo in tags field of wp-jetpack-ssrf.yaml (PR #16347 ). Moved CVE-2020-14644 .yaml to the correct folder in the repository structure (PR #16432 ). False Negatives Fixed a broken regex in the waf-detect BIG-IP ASM matcher that used start-of-response anchors (\A, ^) against a blob beginnin
Technical vulnerability data
Raw observations
First-party sensor telemetry is active; no disclosure-eligible deterministic observation is currently public for this CVE. This does not mean no activity was observed.