Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

6 hours ago [email protected] (The Hacker News)

Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian.

Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM.

The vulnerability in question is CVE-2026-105740 (CVSS score: 9.9), a case of

The post “Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)

Tags: Critical Severity, Exploit, Hacker, Hacker News, Vulnerability

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

51 mins ago [email protected] (The Hacker News)

Vulnerabilities

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

7 hours ago [email protected] (The Hacker News)

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

18 hours ago [email protected] (The Hacker News)

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

19 hours ago [email protected] (The Hacker News)

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

1 day ago [email protected] (The Hacker News)

Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days