Attackers Exploit Critical Langflow and Rails Flaws in Credential
VulnCheck reports active exploitation of critical Langflow CVE-2026-0768 and Rails CVE-2026-66066 for credential harvesting, with detections rising to 360.
88
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 1, 2026
- Last mentionedSep 1, 2026
Timeline
2 articles · newest firstFake Claude Opus 5 app delivers malware and wipes its own tracks
A fake 'Claude Opus 5' GitHub repository impersonating Anthropic distributes RevStealer, a Windows infostealer stealing passwords, crypto wallets and VPN credentials.
55
Related CVEs
by mentions- CVE-2025-3248100%9.8Unauthenticated RCE in Langflow /api/v1/validate/code
- CVE-2026-076941%9.8Unauthenticated Eval Injection RCE in Langflow (eval_custom_component_code)
- CVE-2026-07682%9.8Langflow code Code Injection Remote Code Execution Vulnerability
- CVE-2026-6606630%9.5Unauthenticated Arbitrary File Read in Ruby on Rails Active Storage
- CVE-2026-502736%8.8Authenticated Path Traversal Arbitrary File Write in Langflow Files API
Appears with
- Claude Opus 5product · 1
- Anthropicorganization · 1
- US, Germany, Malaysia, Brazil, India Langflow hostsvictim · 1
- VulnCheckorganization · 1
- Morphisecorganization · 1
- VulnCheckvendor · 1
- Anthropicvendor · 1
- Ruby on Railsvendor · 1
- Python credential harvestermalware · 1
- SimpleHelpproduct · 1
- Morphisecvendor · 1
- Claude Opus 5ai model · 1
- RevStealermalware · 1
- Claude-Opus-5-Free-Desktopproduct · 1
- Langflowvendor · 1
- Langflowproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.