IncidentsAttackers target critical Langflow flaw in 1,423 exploit attempts
Security firm Previdian says honeypots recorded more than a thousand attempts to exploit a maximum-severity bug in the open-source AI workflow platform.
15 Oct 2026
Critical Authenticated RCE Flaw in Langflow Actively Exploited
A critical authenticated remote code execution vulnerability (CVE-2026-105740, CVSS 9.9) in the open-source Langflow AI workflow platform is being actively targeted, with 1,423 exploit attempts recorded via honeypots according to security firm Previdian.
Disclosed 15 October 2026 · Record updated 15 October 2026
Impact
Threat actors are actively exploiting the critical authenticated RCE flaw in Langflow, an open-source AI application and agentic workflow builder, with over a thousand exploit attempts detected via honeypots.
Our coverage
IncidentsSources
- thehackernews.comhttps://thehackernews.com/2026/10/langflows-critical-authenticated-rce.html