INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Langflow CVE-2026-0768 Exploit Attacks

| 2026-09-02 07:58 CRITICAL MEDIUM EXPLOITED VULNERABILITY ATTACK ON AI SYSTEMS
JSON
Executive Summary
AI-generated
Researchers have identified a critical vulnerability in the AI-focused low-code platform Langflow, which affects all versions up to 1.4.2. The flaw allows unauthenticated attackers to remotely execute Python code on vulnerable systems. This is not the first time the company has faced security issues; six other vulnerabilities have been added to VulnCheck's KEV list this year. Threat actors are exploiting a critical Langflow flaw that lets them access exploit code, scanners and Suricata/Snort rules, while Canary Intelligence users can see payloads, requests and attacker IPs. Attackers do not need authentication to exploit it and can execute arbitrary Python code. The issue was publicly disclosed in January 2026.
Technical Mitigations AI-generated
* Implement input validation and sanitization for user-supplied data, particularly when it comes to strings that may contain malicious code or sensitive information. * Regularly update and patch all dependencies, including libraries and frameworks used by Langflow and Ruby on Rails, to ensure you have the latest security patches. * Use secure protocols (e.g. HTTPS) to encrypt communication between clients and servers, and consider implementing a web application firewall (WAF) to detect and prevent common web attacks. * Monitor environment variables for suspicious activity, such as unusual login attempts or changes in sensitive data, and take prompt action if necessary to prevent credential-probing and C2 activity. * Implement a secure file system and storage solution that can handle arbitrary files and processes, and consider using a cloud provider's built-in security features (e.g. AWS Key Management Service) to manage access controls and encryption.
Technical Observables Login Required
Indicators of Compromise (IoCs) Protected

Raw threat telemetry, malicious IP addresses, file hashes, and direct VirusTotal correlation are restricted to authenticated users.

Sign In to View 1 IoCs Create Free Account
8.1.•••.•••
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
CVE-2026-66066CVE-2026-66066 CVE-2026-0769CVE-2026-0769 CVE-2025-3248CVE-2025-3248 CVE-2026-5027CVE-2026-5027 CVE-2026-0768CVE-2026-0768
Target & Sectors
DACH DACH ASEAN ASEAN FIVE_EYES FIVE_EYES
Incident Timeline
‎July 2025
Threat actors used CVE-2026-0768 to target Langflow.
‎January 2026
VulnCheck's KEV list has been updated to include CVE-2026-0768, a vulnerability in Langflow that allows attackers to exploit environment variables and gain unauthorized access.
organisation VulnCheck Canaries
“A few hours ago, VulnCheck Canaries began observing first-time exploitation of CVE-2026-0768 in Langflow, a popular low-code platform for building AI-powered applications and workflows.”
organisation AWS
They are checking environment variables such as Langflow, OpenAI and AWS keys, reading Langflow’s secret key, and looking for SSH access and shell history.
organisation Langflow’s
They are checking environment variables such as Langflow, OpenAI and AWS keys, reading Langflow’s secret key, and looking for SSH access and shell history.
organisation SSH
They are checking environment variables such as Langflow, OpenAI and AWS keys, reading Langflow’s secret key, and looking for SSH access and shell history.
organisation VulnCheck
Six other Langflow CVEs have been added to VulnCheck’s KEV list this year.
organisation KEV
Six other Langflow CVEs have been added to VulnCheck’s KEV list this year.
organisation SecurityAffairs
Follow me on Twitter:  @securityaffairs  and  Facebook  and  Mastodon Pierluigi Paganini ( SecurityAffairs  – hacking, Langflow)
‎August 30, 2026
Threat actors used a vulnerability exploit in CVE-2026-0768 to target Langflow.
general_metric 50 detections
VulnCheck said it recorded more than 50 detections within a few hours on August 30, 2026, a figure that has since risen to 360 as of Monday.
organisation VulnCheck
VulnCheck said it recorded more than 50 detections within a few hours on August 30, 2026, a figure that has since risen to 360 as of Monday.
‎Sep 01, 2026
Threat actors used a vulnerability in CVE-2026-0768 to target Langflow.
‎September 02, 2026
Hackers used CVE-2026-0768 to exploit a vulnerability in Langflow's custom component editor, allowing them to remotely execute arbitrary Python code.
vulnerability CVE-2026-0768
Hackers Target Langflow in CVE-2026-0768 Attacks Pierluigi Paganini September 02, 2026 Hackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python code on vulnerable systems.
Hackers have started exploiting a critical vulnerability, tracked as CVE-2026-0768 (CVSS score of 9.8), in the AI-focused low-code platform Langflow.
organisation CVE-2026-0768 Attacks Pierluigi Paganini
Hackers Target Langflow in CVE-2026-0768 Attacks Pierluigi Paganini September 02, 2026 Hackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python code on vulnerable systems.
tactic T1059.006 - Python
Hackers Target Langflow in CVE-2026-0768 Attacks Pierluigi Paganini September 02, 2026 Hackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python code on vulnerable systems.
infrastructure 1.4.2
The flaw affects the code validator in Langflow’s custom component editor, it impacts all Langflow versions up to version 1.4.2.
‎2026/09/02
Threat actors used CVE-2026-0768 attacks to exploit vulnerabilities in Langflow and Ruby on Rails.
organisation Hackers Target Langflow
Hackers Target Langflow in CVE-2026-0768 Attacks.
organisation CVE-2026-0768 Attacks
Hackers Target Langflow in CVE-2026-0768 Attacks.
organisation SimpleHelp
In one case observed against its canary systems, unknown threat actors have been observed exploiting CVE-2026-5027 to drop a Python credential harvester, proxy agents, and SimpleHelp for remote access.
organisation Rails
A vulnerability that could allow an unauthenticated attacker to read arbitrary files from the server, leak Rails process environment and secrets such as secret_key_base, the Rails master key, database passwords, cloud storage credentials, and API tokens, ultimately leading to remote code execution.
organisation API
A vulnerability that could allow an unauthenticated attacker to read arbitrary files from the server, leak Rails process environment and secrets such as secret_key_base, the Rails master key, database passwords, cloud storage credentials, and API tokens, ultimately leading to remote code execution.
organisation CVE-2025
"Source traffic primarily originates from Russia and has thus far exclusively hit Canaries in the U.K." The exploitation comes as threat actors have exploited as many as 12 vulnerabilities since 2025, with more than 15,000 successful attempts leveraging CVE-2026-0769 , CVE-2025-3248 , and CVE-2026-5027 .
organisation CVE-2026
"They then disabled auditd, resulting in a forensic blind spot, and exploited CVE-2026-0769 to drop .sysd," VulnCheck said.
organisation CVE-2025-3248
In another, attackers have weaponized CVE-2025-3248 to enlist the machine into an XMR cryptocurrency miner botnet.
organisation XMR
In another, attackers have weaponized CVE-2025-3248 to enlist the machine into an XMR cryptocurrency miner botnet.
organisation CVE-2026-66066
CVE-2026-66066 aka KindaRails2Shell (CVSS score: 9.5) -
organisation KindaRails2Shell
CVE-2026-66066 aka KindaRails2Shell (CVSS score: 9.5) -
organisation LinkedIn
In a post shared on LinkedIn, security researcher Patrick Garrity said the activity originates from a single IP address in France and establishes command-and-control (C2) to a host in Israel.
organisation IP
In a post shared on LinkedIn, security researcher Patrick Garrity said the activity originates from a single IP address in France and establishes command-and-control (C2) to a host in Israel.
organisation RCE
"Notably, we tested a patched 8.1.3.1 server and found that while the fix blocks the libvips file read, it does not neutralize the variation-key Marshal deserialization: the RCE gadget still executes on a patched server given a valid signature.
organisation Credential-Probing
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity.
organisation Ruby on Rails
" As of early August, more than 7,100 exposed vulnerable instances of Ruby on Rails were identified by VulnCheck.
Tactical Metrics
Metrics
infrastructure
‎1.4.2
Software Version
The flaw affects the code validator in Langflow’s custom component editor, it impacts all Langflow versions up to version 1.4.2.
Intelligence Sources
The Hacker News 2026-09-01
Security Affairs 2026-09-02