Critical Langflow Flaw Exploited as Attacks on AI Platform Rise

The attacks targeting CVE-2026-0768 are the latest threat against the low-code AI development platform, which is receiving more attention from adversaries this year.

September 1, 2026

A critical Langflow vulnerability is being heavily exploited, marking the latest threat to a platform that's become an increasingly popular target.

CVE-2026-0768 is a remote code execution (RCE) flaw in Langflow, a low-code development platform used to design AI agents. The vulnerability, which received a 9.8 CVSS severity score, was initially disclosed in January by Trend Micro's Zero Day Initiative (ZDI).

In a LinkedIn post on Saturday, Caitlin Condon, vice president of security research at VulnCheck, noted that the vendor observed the RCE flaw being exploited on its "canaries," or honeypot systems.

Critical Langflow Flaw Exploited as Attacks on AI Platform Rise

Other newsrooms on this story

Related reading

Hackers Start Exploiting Critical Langflow Vulnerability

Critical Langflow flaw exploited to steal OpenAI and AWS keys

Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE

Path traversal flaw in AI dev platform Langflow exploited in attacks

Hackers Exploit Langflow Vulnerability for Remote Code Execution

Langflow servers under attack as critical vulnerabilities spread across…