🔴 Critical: Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
-
Threat actors are actively exploiting a critical security flaw in Langflow, an open-source platform used to build AI applications and agentic workflows, according to an alert from Previdian. Langflow's parent company, DataStax, was acquired by IBM in February 2025.
The vulnerability is tracked as CVE-2026-105740 and carries a CVSS score of 9.9. It is described as a case of authenticated remote code execution, meaning an attacker who can authenticate to the platform may be able to execute arbitrary code on the underlying system. The flaw has drawn significant attention from adversaries, with 1,423 honeypot exploit attempts recorded as they target the vulnerability in the wild.
Given the severity of the flaw and the volume of exploitation activity observed, organizations running Langflow should treat this as urgent. Review your exposure, ensure the platform is not accessible to untrusted users, and apply any available fixes or mitigations from the vendor as soon as possible.
- Tracked as CVE-2026-105740 with a CVSS score of 9.9
- Authenticated remote code execution vulnerability
- 1,423 honeypot exploit attempts observed
- Affected product: Langflow, now under IBM following the DataStax acquisition
Source: The Hacker News
Is your organization running Langflow, and if so, how are you mitigating exposure to this flaw?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login