Severity: CriticalVulnerabilityModel/inference
Critical Remote Code Execution Flaw in Langflow AI Workflow Platform Under Active Exploit
Global
Live intelligence. Items are aggregated from public sources and summarised automatically. Always verify against the linked source before acting.
Threat actors are actively exploiting a critical authenticated remote code execution vulnerability in Langflow, an open-source platform for building AI applications and agentic workflows. Security researchers detected 1,423 honeypot exploit attempts targeting CVE-2026-105740 (CVSS 9.9), indicating widespread attacker interest in compromising Langflow deployments.
What to do
Immediately audit and patch all Langflow instances to the patched version; isolate affected deployments pending remediation.
Mapped framework pillars
Sources
CVE references
#Langflow#RCE#AI workflow#agentic systems#active exploitation#authenticated attack