US, Germany, Malaysia, Brazil, India Langflow hosts

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 1, 2026
Last mentionedSep 1, 2026

Timeline

1 articles · newest first

Attackers Exploit Critical Langflow and Rails Flaws in Credential

VulnCheck reports active exploitation of critical Langflow CVE-2026-0768 and Rails CVE-2026-66066 for credential harvesting, with detections rising to 360.

The Hacker NewsSep 1, 07:23 UTC · Sep 1, 2026Exploit / PoCExploitedCVE-2026-0768 CVE-2026-66066 CVE-2026-0769+22

Related CVEs

by mentions

CVE-2025-3248100%9.8
Unauthenticated RCE in Langflow /api/v1/validate/code
published Apr 7, 2025LangflowKEVRansomwarePoC ×4
CVE-2026-076941%9.8
Unauthenticated Eval Injection RCE in Langflow (eval_custom_component_code)
published Jan 23, 2026langflowPoC
CVE-2026-07682%9.8
Langflow code Code Injection Remote Code Execution Vulnerability
published Jan 23, 2026langflow langflow
CVE-2026-6606630%9.5
Unauthenticated Arbitrary File Read in Ruby on Rails Active Storage
published Jul 30, 2026Ruby on Rails Active Storage (Action Pack)PoC
CVE-2026-502736%8.8
Authenticated Path Traversal Arbitrary File Write in Langflow Files API
published Mar 27, 2026langflow

Appears with

Unknownthreat actor · 1
VulnCheckorganization · 1
VulnCheckvendor · 1
Ruby on Railsvendor · 1
Python credential harvestermalware · 1
Langflowvendor · 1
SimpleHelpproduct · 1
Langflowproduct · 1

Entities are extracted by the model from each article. First seen Sep 1, 2026, last mentioned Sep 1, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.