Cybersecurity News
Filters
Filtered by category: The Hacker News, tag: remote code execution × Clear
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Matched: Artificial Intelligence
A critical flaw in Langflow (CVE-2026-105740, CVSS 9.9) is being actively exploited, with 1,423 attempts recorded on honeypots. The vulnerability affects the open-source AI workflow platform, now owned by IBM following its February 2025 acquisition of DataStax. The flaw allows authenticated remote code execution, prompting security alerts from Previdian urging users to patch immediately.