Langflow's Critical RCE Flaw Under Active Attack: 1,423 Exploitation Attempts Detected
A critical authenticated remote code execution vulnerability (CVE-2026-105740, CVSS 9.9) in Langflow, an open-source AI application development platform owned by DataStax and acquired by IBM in February 2025, is being actively exploited by threat actors. The flaw allows any authenticated user to execute arbitrary OS commands through malicious MCP server configurations with zero validation. Previdian honeypot sensors recorded 1,423 exploitation attempts from 27 unique IP addresses across 15 countries since September 2026, with activity significantly ramping up in October. Attackers are using common credentials to authenticate and then exploiting the vulnerability to extract sensitive configurations, access host filesystems, and establish persistent backdoors. This incident highlights the growing threat landscape targeting AI development platforms as organizations rapidly adopt AI technologies without adequate security oversight. The systematic targeting of multiple Langflow vulnerabilities by the same threat actors demonstrates the critical need for securing AI infrastructure as these platforms become integral to business operations.
Kill Chain
