Thank you for reaching out to S&P Global regarding the Langflow Vulnerability (CVE-2026-0770). We are aware and have checked if this vulnerability has had any impact to S&P Global’s systems. At this time, there is no information or evidence to suggest that S&P Global has been adversely impacted by the above vulnerability.
Rest assured, vulnerabilities are assessed and if they are occurring in our environments, they will be remediated expeditiously as per the S&P Global’s Vulnerabilities Remediation Standard which follows a Risk based approach and based on the criticality of the systems and how it impacts our business, remediation is prioritized.
At S&P Global, protection of customer information is an integral part of daily business processes. This is accomplished by having a centralized S&P Global Cyber Defense Team with the goal of enhancing the company’s ability to:
- Predict security events and their relative impact to S&P Global’s environments,
- Prevent attacks by augmenting the enterprise security posture,
- Detect attacks that have evaded preventative measures,
- Respond to security events to ensure that they are remediated in a timely fashion using a risk-based approach.
As a public listed company at NYSE, S&P Global discloses risk factors and material changes, including cyber risks and related matters, in accordance with its US SEC disclosure obligations in its public filings. You can find these filings on S&P Global’s investor relations website and on the US SEC’s website.
As a result of S&P Global’s constant network and environment scans, should there be any further developments, we would be highly cooperative with our clients.
In the meanwhile, should you have any specific questions or concerns, please reach out to your S&P Global representative.
