CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities

Impact

These vulnerabilities enable unauthenticated remote code execution and authentication bypass, allowing attackers to gain administrative or superuser access, execute arbitrary code, and potentially control affected systems. The Langflow OSS flaw allows attackers to chain API endpoints to obtain superuser tokens and execute Python code remotely. The N-able N-central vulnerabilities have been exploited to bypass authentication and gain administrative access to managed systems. The Apache Tomcat EncryptInterceptor bypass allows unauthenticated remote code execution on cluster members, undermining encryption protections. Exploitation has been observed in the wild, including by advanced threat actors deploying malware, posing significant risk to affected organizations.