Vulnerabilities · 57 days ago

Langflow probes spread into Rails secrets theft

VulnCheck says attackers have widened their campaign to hit both CVE-2026-0768 in Langflow and CVE-2026-66066 in Ruby on Rails, with detections rising from more than 50 on August 30 to over 360 by Monday. What began as Langflow probing is now sustained automated activity aimed at credential harvesting and reconnaissance.

On the Rails side, the path starts with a crafted image upload that Active Storage and libvips process differently, letting the server be tricked into reading files it should not touch. VulnCheck says the resulting requests are querying environment variables and secret files for cloud and API keys, so the issue is not just a bad image or even initial access: exposed secrets can become reusable credentials for follow-on access.

For teams running internet-facing Langflow or Rails apps that accept untrusted uploads, the exposure sits at the app and host secrets layer, not just the original flaw. Even if one path is patched, any secrets already readable on the host can still be harvested by the same campaign.

CVE-2026-0768

NVD KEV

CVSS 9.8 CRITICAL: langflow code Code Injection Remote Code Execution Vulnerability. EPSS 28% (98th percentile).

Timeline

Sep 1 Reported by Dark Reading

Sources

4 sources covering this story

Dark Reading Sep 1
Critical Langflow Flaw Exploited as Attacks on AI Platform Rise
The attacks on CVE-2026-0768 are the latest threats against the low-code AI development platform, which adversaries are flocking to this year.
BleepingComputer Sep 1
Critical Langflow flaw exploited to steal OpenAI and AWS keys
Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys.
SecurityWeek Sep 1
Hackers Start Exploiting Critical Langflow Vulnerability
Tracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely.
The Hacker News Sep 1
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
Attackers are exploiting critical Langflow and Rails flaws; the Rails bug can expose files and secrets and ultimately enable code execution.
SecurityWeek Aug 31
Critical Ruby on Rails Vulnerability in Attackers’ Crosshairs
Named KindaRails2Shell, the arbitrary file read flaw allows attackers to extract secrets and execute arbitrary code remotely.

Entities

CVE-2026-0768

Part of the PlainSec briefing for 2026-09-02

Editions

Vulnerabilities · 57 days agoLangflow probes spread into Rails secrets theftVulnCheck says attackers have widened their campaign to hit both CVE-2026-0768 in Langflow and CVE-2026-66066 in Ruby on Rails, with detections rising from more than 50 on August 30 to over 360 by Monday. What began as Langflow probing is now sustained automated activity aimed at credential harvesting and reconnaissance.On the Rails side, the path starts with a crafted image upload that Active Storage and libvips process differently, letting the server be tricked into reading files it should not touch. VulnCheck says the resulting requests are querying environment variables and secret files for cloud and API keys, so the issue is not just a bad image or even initial access: exposed secrets can become reusable credentials for follow-on access.For teams running internet-facing Langflow or Rails apps that accept untrusted uploads, the exposure sits at the app and host secrets layer, not just the original flaw. Even if one path is patched, any secrets already readable on the host can still be harvested by the same campaign.

CVE-2026-0768

NVD KEV

CVSS 9.8 CRITICAL: langflow code Code Injection Remote Code Execution Vulnerability. EPSS 28% (98th percentile).

Timeline

Sep 1 Reported by Dark Reading

Sources4 sources covering this story

Dark Reading Sep 1

Critical Langflow Flaw Exploited as Attacks on AI Platform Rise

The attacks on CVE-2026-0768 are the latest threats against the low-code AI development platform, which adversaries are flocking to this year.

BleepingComputer Sep 1

Critical Langflow flaw exploited to steal OpenAI and AWS keys

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys.