Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
- ID
- 20138
- Status
- summarized
- Published
- 01 Sep 2026, 3:22 PM
- Fetched
- 01 Sep 2026, 4:23 PM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/09/attackers-exploit-critical-langflow-and.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Summary
- Score
- 8.5
- Created
- 01 Sep 2026, 4:31 PM
- Tags
- Audience
- developersai_ml_learnersai_agent_userssaas_founders
What happened
Attackers are actively exploiting two critical vulnerabilities: CVE-2026-0768 (CVSS 9.8) in Langflow, allowing root-level arbitrary Python code execution, and CVE-2026-66066 (CVSS 9.5) in Ruby on Rails, leaking secret_key_base, database passwords, cloud credentials, and API tokens via an Active Storage/libvips image-processing discrepancy. VulnCheck recorded 360 detections by Monday, with attackers specifically harvesting OPENAI_API*, AWS_ACCESS*, and AWS_SECRET* environment variables; Malaysia is explicitly listed among the top five countries with vulnerable Langflow hosts alongside the U.S., Germany, Brazil, and India.
Why it matters
If you run Langflow or any Rails app using libvips for Active Storage image uploads, patch immediately—attackers are pulling AI API keys, AWS credentials, and SSH keys from exposed hosts right now, and Malaysia is named as a heavily affected region. For Langflow specifically, check that LANGFLOW_SUPERUSER and /root/.cache/langflow/secret_key are not internet-exposed, and rotate any OPENAI_API_KEY or AWS keys that may have been accessible on an unpatched instance.
Discussion angle
Langflow is increasingly popular for building AI agent workflows, but this CVE shows that exposing it publicly turns your AI API keys and cloud credentials into a direct target—discuss whether your team's Langflow or similar AI-flow-builder instances are behind proper network controls, and whether your Rails apps use libvips for Active Storage.