Vulnerabilities & Exploits

Langflow probes spread into Rails secrets theft

VulnCheck says attackers have widened their campaign to hit both CVE-2026-0768 in Langflow and CVE-2026-66066 in Ruby on Rails, with detections rising from more than 50 on August 30 to over 360 by Monday. What began as Langflow probing is now sustained automated activity aimed at credential harvesting and reconnaissance.

On the Rails side, the path starts with a crafted image upload that Active Storage and libvips process differently, letting the server be tricked into reading files it should not touch. VulnCheck says the resulting requests are querying environment variables and secret files for cloud and API keys, so the issue is not just a bad image or even initial access: exposed secrets can become reusable credentials for follow-on access.

For teams running internet-facing Langflow or Rails apps that accept untrusted uploads, the exposure sits at the app and host secrets layer, not just the original flaw. Even if one path is patched, any secrets already readable on the host can still be harvested by the same campaign.

4 sources · Sep 1

CVE-2026-0768

NVD KEV

CVSS 9.8 CRITICAL: langflow code Code Injection Remote Code Execution Vulnerability. EPSS 28% (98th percentile).

Timeline

Sep 1 Reported by Dark Reading

Sources

Sep 1 Dark Reading
Critical Langflow Flaw Exploited as Attacks on AI Platform Rise
The attacks on CVE-2026-0768 are the latest threats against the low-code AI development platform, which adversaries are flocking to this year.
original
Sep 1 BleepingComputer
Critical Langflow flaw exploited to steal OpenAI and AWS keys
Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys.
original
Sep 1 SecurityWeek
Hackers Start Exploiting Critical Langflow Vulnerability
Tracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely.
original

Part of the PlainSec briefing for 2026-09-02

Every edition of this story: Langflow probes spread into Rails secrets theft

More from today

Vulnerabilities & ExploitsLangflow probes spread into Rails secrets theftVulnCheck says attackers have widened their campaign to hit both CVE-2026-0768 in Langflow and CVE-2026-66066 in Ruby on Rails, with detections rising from more than 50 on August 30 to over 360 by Monday. What began as Langflow probing is now sustained automated activity aimed at credential harvesting and reconnaissance.On the Rails side, the path starts with a crafted image upload that Active Storage and libvips process differently, letting the server be tricked into reading files it should not touch. VulnCheck says the resulting requests are querying environment variables and secret files for cloud and API keys, so the issue is not just a bad image or even initial access: exposed secrets can become reusable credentials for follow-on access.For teams running internet-facing Langflow or Rails apps that accept untrusted uploads, the exposure sits at the app and host secrets layer, not just the original flaw. Even if one path is patched, any secrets already readable on the host can still be harvested by the same campaign.4 sources · Sep 1

CVE-2026-0768

NVD KEV

CVSS 9.8 CRITICAL: langflow code Code Injection Remote Code Execution Vulnerability. EPSS 28% (98th percentile).

Timeline

Sep 1 Reported by Dark Reading

Sources

Sep 1 Dark Reading

Critical Langflow Flaw Exploited as Attacks on AI Platform Rise

The attacks on CVE-2026-0768 are the latest threats against the low-code AI development platform, which adversaries are flocking to this year.

original

Sep 1 BleepingComputer

Critical Langflow flaw exploited to steal OpenAI and AWS keys

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys.

original

Sep 1 SecurityWeek

Hackers Start Exploiting Critical Langflow Vulnerability

Tracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely.

original

Part of the PlainSec briefing for 2026-09-02Every edition of this story: Langflow probes spread into Rails secrets theftMore from today

Virtualizor update hijack puts VPS hosts at risk

PaperCut zero-days shift from access to theft

Exchange servers leave mailboxes open to hijack