GoKawiil
Tech News
Security researchers have observed active exploitation of CVE-2026-0768, a critical flaw in Langflow, the low-code platform used for building AI applications. This marks the latest in a series of attacks targeting the platform, which has drawn increasing attention from threat actors this year.
Hackers are actively exploiting CVE-2026-0768, a critical unauthenticated remote code execution flaw in the open-source Langflow AI development platform, to steal cloud and API credentials. VulnCheck's honeypots recorded roughly 50 exploitation attempts over a weekend, mostly from Russian IP addresses, with the count climbing to 360 attacks within days. The flaw lets attackers run arbitrary Python code with root privileges by abusing improper input validation in Langflow's code validator.