01 / EXECUTIVE SUMMARY
CISA added CVE-2026-0770 to the Known Exploited Vulnerabilities Catalog. The Langflow flaw includes functionality from an untrusted control sphere and can allow remote attackers to execute arbitrary code.
02 / WHAT HAPPENED
CISA added CVE-2026-0770 to the Known Exploited Vulnerabilities Catalog. The Langflow flaw includes functionality from an untrusted control sphere and can allow remote attackers to execute arbitrary code.
The chain distinguishes what appeared valid, what was physically true, which authority followed and what consequence the source documents.
An AI workflow component was accepted as part of a trusted execution environment.
Functionality supplied from an untrusted control sphere could obtain arbitrary code-execution authority.
CISA directed agencies to apply vendor mitigations under BOD 26-04 or discontinue use when mitigations are unavailable.
CISA classified the vulnerability as known exploited; the catalog does not quantify attributable loss.
A verifiable principal and origin boundary for every component allowed to execute inside an agentic workflow.
ECR separates a documented monetary floor from a modeled social and economic consequence envelope. It is not an accounting loss figure.
The public record establishes the control failure or authority action, not a realized loss total. The range is a deliberately wide scenario envelope.
Exploit status, product and required action come from the official CISA KEV record. 4SI supplies the Presence interpretation and score.
Agentic workflow execution becomes unsafe when component origin is accepted without a current accountable principal.
4SI does not claim to have independently verified the underlying event. Scores, boundary analysis and economic ranges interpret published evidence; they are not probabilities, compliance findings, valuations or loss forecasts.
Related cases are editorially connected by domain, authority pattern or missing physical trust boundary.