Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCE

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-10 15:00 UTC
  • Importiert: 2026-06-18 11:43 UTC
  • CVSS: 8.8
  • Quelle-ID: thn_global
  • uid_hash: 92bfde07584f6eea224945c601cc7ecf5cfc90afcd2b5f1b996385c6c3c83d59

Inhalt

A high-severity security flaw in Langflow, an open-source low-code platform to build artificial intelligence (AI) applications, has come under active exploitation in the wild, according to findings from VulnCheck.

The vulnerability in question is CVE-2026-5027 (CVSS score: 8.8), a case of path traversal that could allow an attacker to write files to arbitrary locations.

"The 'POST /api/v2/

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-5027

HIGH

8.8

HIGH

8.8

2026-03-27

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews