Back to the CVE list
CVE-2026-5027

Path traversal in Langflow

CVSS score

8.8

EPSS probability

%4.8

Risk score

0.4

Published

6 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Langflow 1.8.4 - Path Traversal to Remote Code Execution

Exploit referenceSource updated: 31.08.2026 00:00:00

Nuclei: Langflow <= 1.8.4 - Path Traversal to RCE via File Upload

Exploit reference

CVE-2026-5027

Public PoC

Langflow, Remote Code Execution (RCE) via Cron Job Injection through Path Traversal

Public PoC

CVE-2026-5027 - Draft

Public PoC

Layer-6/CVE-2026-5027-Langflow

Public PoC

Langflow, Remote Code Execution (RCE) via Cron Job Injection through Path Traversal (CVE-2026-5027)

Public PoC

Proof of concept exploit code for CVE-2026-5027

Public PoC

CVE-2026-5027 - Langflow Path Traversal to Remote Code Execution (CVSS 8.8)

Public PoC

yym8538/CVE-2026-5027

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-5027"