Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-15 07:07 UTC
  • Importiert: 2026-10-21 07:10 UTC
  • CVSS: 9.9
  • Quelle-ID: thn_global
  • uid_hash: 4163ccda4ef19a26cb9ad230f8bef85bf6bde60c615a858e5bd19011ba5d401d
The Hacker News

Inhalt

Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian.

Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM.

The vulnerability in question is CVE-2026-105740 (CVSS score: 9.9), a case of

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-105740

CRITICAL

9.9

CRITICAL

9.9

2026-10-05

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste