Security readout for executives and security teams
Plain-English summary
CVE-2026-0772 is a high-severity Langflow issue where an authenticated remote user could cause unsafe data deserialization in the disk cache service and run code as the Langflow service account. Public sources do not state active exploitation or a named patch. Organizations running Langflow should identify exposed instances and check vendor guidance promptly.
Executive priority
Treat as a near-term remediation and exposure review item. The issue can lead to full compromise of the Langflow service context, but currently requires authentication and has no cited public exploitation. Prioritize internet-facing or broadly accessible Langflow deployments first.
Technical view
The flaw is CWE-502 deserialization of untrusted data in Langflow’s disk cache service. ZDI describes remote code execution requiring authentication, with code executing in the service account context. The listed affected version is Langflow 1.5.0.post2, with CVSS 7.5, AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.
Likely exposure
Exposure is most relevant where Langflow is deployed and accessible to authenticated users, especially shared, internet-reachable, or weakly governed environments. The only explicitly listed affected version is 1.5.0.post2; broader version impact is not confirmed in the provided sources.
Exploitation context
Authentication is required, and attack complexity is rated high. If exploited, impact is severe because the attacker may execute arbitrary code under the Langflow service account. The sources do not report known exploitation in the wild, and the CVE is not marked KEV.
Researcher notes
Evidence is limited to the CVE record and ZDI advisory summary. Do not assume versions beyond 1.5.0.post2 are affected without vendor confirmation. No exploit details, patch version, or vendor mitigation were provided in the source bundle.
Mitigation direction
- Inventory Langflow deployments and identify any running version 1.5.0.post2.
- Check Langflow vendor guidance and ZDI advisory updates for fixes or supported mitigations.
- Restrict Langflow access to trusted users and networks where operationally feasible.
- Review service account privileges and reduce unnecessary permissions.
Validation and detection
- Confirm installed Langflow versions across production, development, and lab systems.
- Verify whether Langflow is reachable from untrusted networks or broad user groups.
- Review authentication records for unusual access to Langflow.
- Check application and host logs for suspicious disk cache or service account activity.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-502: Code execution behavior lookup
Code execution and unsafe deserialization weaknesses often justify reviewing execution behavior and process telemetry. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupExecution behavior lookup
The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2026-0772 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.5 (3.0)
- Known Exploited
- No
- Published
Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H1.65.9Primary CVE scoreVulnerability scoring details
Base CVSS 3.0 score
7.5HighVector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Source materials
- CVE List V5 sourceCVE List V5
- ZDI-26-038CVE reference · x_research-advisory
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Deserialization of Untrusted Data
Deserialization of Untrusted Data represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.