ZDI

Attackers are exploiting CVE-2026-0768, a critical CVSS 9.8 vulnerability in Langflow's validate endpoint, to harvest credentials from AI infrastructure, with over 15,000 successful exploitation attem…

Researchers identified six new remote code execution (RCE) vulnerabilities in Flowise v3.1.1 and v3.1.2, a generative AI development platform, adding to a series of high and critical security flaws di…

Rapid7's Metasploit Framework has added a new exploit for FlowiseAI Flowise (CVE-2026-41264), an unauthenticated remote code execution vulnerability in the CSV Agent feature that allows attackers to u…