Attackers Target AI Development Platform Langflow

CVE-2026-0768 is an unauthenticated remote code execution vulnerability in the Langflow AI application-building platform disclosed in January 2026. It allows arbitrary Python code execution via decorator and default-argument evaluation on the validation endpoint without authentication. In September 2026, F5 Labs observed 405 exploitation attempts from 55 IP addresses, marking the first known opportunistic internet-wide scanning targeting an AI/ML development platform. Attackers used payloads for capability probing, timing checks, and environment harvesting to extract cloud credentials, API keys, and database secrets. The activity originated mainly from Google Cloud hosts and European scanning subnets using forged and spoofed headers. Public exploit code is available via Metasploit, and detection templates exist for this vulnerability.

• Hackers Start Exploiting Critical Langflow VulnerabilityCriticalVulnerability2026-09-01
• CISA Issues Emergency Directive to Patch Critical Remote Code Execution Vulnerability in Langflow AI FrameworkAnalysis2026-07-23
• KeyHunter Operation: Harvard Alumni Data, Stanford Applications and LLM Key TheftCampaign2026-11-04
• The Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model ResourcesMalware2026-11-02
• Node2Shell (CVE-2026-111497): Brotli RCE ExploitedExploitedVulnerability2026-10-29