Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Honeypots recorded 1,423 attempts exploiting Langflow's critical authenticated RCE, CVE-2026-105740.
Previdian reports active exploitation of CVE-2026-105740, a CVSS 9.9 authenticated remote-code-execution flaw in Langflow versions before 1.9.0. Any logged-in user can store an MCP stdio command that Langflow passes unsandboxed to bash, with environment-variable injection also possible. Since September 19, 2026, its honeypots recorded 1,423 attempts from 27 IP addresses, including common-password logins and theft of Langflow secrets. Langflow, owned by IBM via DataStax, also patched related CVE-2026-105697.
78