Attackers are actively exploiting CVE-2026-0768, a CVSS 9.8 unauthenticated remote code execution vulnerability in Langflow's `/api/v1/validate/code` endpoint, to steal OpenAI, AWS, Anthropic, and GCP…
Threat intelligence firm VulnCheck and the Cloud Security Alliance report that attackers exploited CVE-2026-0768, an unauthenticated remote code execution vulnerability in the open-source AI framework…
Two critical vulnerabilities are being actively exploited to steal AI API keys and cloud credentials: CVE-2026-0768 in Langflow 1.4.2 and earlier (CVSS 9.8, no authentication required) and CVE-2026-66…
Dark Reading reports that attackers are actively exploiting CVE-2026-0768, a critical unauthenticated remote code execution vulnerability in Langflow versions 1.4.2 and earlier. The flaw, which reside…
Attackers are exploiting CVE-2026-0768, a critical CVSS 9.8 vulnerability in Langflow's validate endpoint, to harvest credentials from AI infrastructure, with over 15,000 successful exploitation attem…
Attackers are exploiting a critical unauthenticated remote-code-execution flaw in Langflow, tracked as CVE-2026-0768, to steal OpenAI API keys, AWS credentials, and administrator secrets from exposed …
ServiceNow disclosed three CVSS 10.0 vulnerabilities in its AI Platform on August 27, 2025, including code injection (CVE-2026-18885), access control bypass (CVE-2026-18886), and SQL injection (CVE-20…
Rapid7's Metasploit Framework 6.5 release adds 13 new modules, including exploits for WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard…
IBM's 2026 X-Force Threat Intelligence Index found that roughly one in six breaches now involve AI, with AI-generated phishing and deepfake impersonation making up the bulk. In July 2026, security fir…
Flowise, the open-source visual AI workflow builder with 55,000 GitHub stars and clients including AWS, Accenture, and Priceline, announced on July 29, 2026 that it will shut down, with code freeze im…
CrewAI, Lindy.ai, n8n, Langflow, and Gumloop are the top low-code and no-code AI agent builders in 2026, according to a new guide. CrewAI offers a developer-first, open-source framework with pricing s…
A Chinese-speaking hacker used DeepSeek to autonomously attack more than 460 systems, with only three confirmed compromises, according to a July 30, 2026 report from Palo Alto Networks' Unit 42. The o…
A security engineer evaluated seven workflow automation platforms—n8n, Activepieces, Dify, Windmill, Tracecat, Kestra, and Langflow—to build a SOC agent and found that nearly all are open core, with s…
Unit 42 researchers have uncovered a Chinese-speaking threat actor using an autonomous attack platform that combines the Hermes agent with DeepSeek's AI to conduct reconnaissance, PoC acquisition, and…
Palo Alto Networks' Unit 42 discovered a China-based threat actor using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers, with the agent ind…
A security researcher detailed an autonomous AI attack that exploited exposed Langflow, n8n, and Marimo instances but was foiled when the agent left a public web server broadcasting its own tool calls…
LangChain, LangGraph, LangSmith, Langflow, and other 'Lang' tools are often confused. A developer's guide clarifies the ecosystem: langchain-core is the foundation, langchain offers batteries-included…
Internet-exposed AI/LLM tool infrastructure has surged over 60% in the past nine months, with more than 294,000 distinct IPs now exposing one of 43 detected tools, up from ~183,000 in October 2025, ac…
Cloud security firm Sysdig reported that an agentic threat actor named JADEPUFFER is exploiting a vulnerability (CVE-2025-3248) in AI framework Langflow to deploy ransomware that destroys AI model art…
GitHub shipped CodeQL 2.26.0 on July 10 with a new static analysis query, js/system-prompt-injection, that detects untrusted user input flowing into AI model system prompts in JavaScript and TypeScrip…