Hackers Target Langflow in CVE-2026
Threat actors are actively exploiting CVE-2026-0768, an unauthenticated Python RCE in Langflow, hunting OpenAI, AWS, and SSH credentials.
Attackers began exploiting CVE-2026-0768 (CVSS 9.8), an unauthenticated remote code execution flaw in the code validator of the Langflow AI low-code platform, affecting all versions up to 1.4.2. VulnCheck observed 50+ Canary detections on the first day of exploitation, with attackers checking Langflow, OpenAI, and AWS keys in environment variables, reading the secret key, and looking for SSH access and shell history; most traffic originates from Russia and targeted UK-based canaries. The flaw was reported via ZDI by Trend Research in July 2025 and disclosed in January 2026; six other Langflow CVEs were added to VulnCheck's KEV list this year.
- CVE-2026-0768 allows unauthenticated arbitrary Python execution in the context of root on Langflow <= 1.4.2
- VulnCheck canaries logged 50+ first-time exploitation detections within hours
- Attackers conduct reconnaissance and harvest credentials from environment variables and shell history
- Exploit code, scanners, and Suricata/Snort rules are available from VulnCheck
- Six other Langflow CVEs were added to VulnCheck's KEV list this year
- CVEs
- CVE-2026-0768
- Products
- Langflow
- Countries
- RussiaUnited Kingdom
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-0768 | Langflow code Code Injection Remote Code Execution Vulnerability | 9.8 | 2% |
From the original article
2 min read at securityaffairs.com
Hackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python code on vulnerable systems. Hackers have started exploiting a critical vulnerability, tracked as CVE-2026-0768 (CVSS score of 9. 8), in the AI-focused low-code platform Langflow.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.