Skip to content

Testbeds/CVE 2026 0770 - #228

Merged
copybara-service[bot] merged 3 commits into
google:mainfrom
sanjaymahajan14:testbeds/cve-2026-0770
Jul 27, 2026
Merged

Testbeds/CVE 2026 0770#228
copybara-service[bot] merged 3 commits into
google:mainfrom
sanjaymahajan14:testbeds/cve-2026-0770

Conversation

@sanjaymahajan14

Copy link
Copy Markdown
Contributor

Created Testbeds for CVE-2026-0770. Please review.

Comment thread langflow/CVE-2026-0770/README.md Outdated
Comment on lines +20 to +46
## Vulnerability Verification (Tsunami Scanner)

Follow these operational steps to execute a scanning validation container against the target instance:

Initialize Interactive Scanner Session: Launch the interactive Tsunami Scanner container framework with enhanced network capabilities.

```sh
docker run -it --cap-add=NET_RAW --cap-add=NET_ADMIN --add-
host=host.docker.internal:host-gateway --rm ghcr.io/google/tsunami-scanner-full bash
```

Provision Binaries: Update container package repositories and add the nmap utility.

```sh
apt update && apt install nmap
```

Execute Policy Scan: Run the targeted Tsunami scanning tool specifying the designated CVE detector.

```sh
tsunami --ip-v4-target=169.254.1.2 --port-ranges-target=7860 --detectors-include="Langflow_CVE_2026_0770" --scan-results-local-output-format=JSON --scan-results-local-output-filename=result.json
```





Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can remove this part as it is not relevant. Tsunami setup could be different and it is well documented already

@hemantadil hemantadil left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@copybara-service
copybara-service Bot merged commit 6ac1443 into google:main Jul 27, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants