Skip to content

Commit 89a4dfa

Browse files
removed trailing white spaces for cve-2026-0770
1 parent 5dbee0c commit 89a4dfa

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ finding: {
1717
publisher: "GOOGLE"
1818
value: "CVE-2026-0770"
1919
}
20-
severity: CRITICAL
20+
severity: CRITICAL
2121
title: "Langflow < 1.6.0 - exec_globals Remote Code Execution Vulnerability"
2222
description: "Langflow contains an unauthenticated remote code execution vulnerability caused by improper handling of the exec_globals parameter in the validate endpoint. The flaw results from the inclusion of functionality from an untrusted control sphere (CWE-829). A remote attacker can exploit this vulnerability to execute arbitrary code in the context of root."
2323
recommendation: "Upgrade Langflow version 1.6.0 or later. Do not expose Langflow instances directly to the internet and restrict access to validation endpoints."
@@ -47,8 +47,8 @@ actions: {
4747
}
4848
}
4949
}
50-
}
51-
50+
}
51+
5252
actions: {
5353
name: "detect_exec_globals_rce"
5454
http_request: {

0 commit comments

Comments
 (0)