companyLangflow
suspectedlowVulnerabilityFirst reported Oct 15, 2026
Langflow: critical RCE flaw CVE-2026-105740 exploited in the wild
Threat actors are exploiting CVE-2026-105740 (CVSS 9.9), a critical authenticated remote code execution flaw in the open-source AI application platform Langflow, according to an alert from Previdian. Honeypots recorded 1,423 exploit attempts. Langflow's parent company DataStax was acquired by IBM in February 2025.
Members only
The full record: the timeline and 1 linked report
- Every update as it happened, with the status at each step
- Every report behind the record, newest first
- Alerts the moment Langflow — or anything else you track — is hit again
A free account is all it takes — no card, one minute.