ENH: Exploit module for Langflow Unauthenticated Remote Code Execution vulnerability CVE-2026-0769

[rmhowe425]

Description

This pull request adds a new exploit module that detects and exploits an unauthenticated remote code execution vulnerability impacting Langflow version 1.3.2

Related Issue:
Fixes #21866

Breaking Changes

None

Reviewer Notes

Verification Steps

1. docker pull and docker run langflow, per documentation
2. Start msfconsole
3. Do: use exploit/multi/http/langflow_unauth_rce_cve_2026_0769
4. Do: set rhosts=<rhost>
5. Do: exploit
6. You should get a meterpreter session

Test Evidence

Environment

Field	Details
Operating System	Ubuntu 22.04
Target Software/Hardware	langflow 1.3.2
Docker Image / Vagrant Setup	langflowai/langflow:1.3.2

AI Usage Disclosure

None

Pre-Submission Checklist

• Included a corresponding documentation markdown file in documentation/modules (new modules only)
• No sensitive information (IP addresses, credentials, API keys, hashes) in code or documentation
• Tested on the target environment specified in the Environment section above
• Included RSpec tests for library changes (encouraged for lib/ changes)
• Read the CONTRIBUTING.md and module acceptance guidelines