Langflow

Reported Context (39)

This release adds multiple new modules, and 6 of those modules point at a single target: Langflow, the open-source LLM workflow builder. Together they cover an authentication bypass (CVE-2026-93680), 3 unauthenticated Metasploit Adds Exploit Modules for Langflow, OpenCTI, Grafana and More
Emerging attack surfaces such as AI frameworks (Langflow) and cloud consoles indicate a shift toward targeting development and automation layers, signaling the beginning of AI stack exploitation. Seqrite’s India Cyber Threat Report 2026 Records 265.52 Million Detections
against Langflow AI to deploy that forwarded emails to CrowdStrike 2026 Threat Report Finds Faster Intrusions and Rising AI-Enabled Attacks
In this campaign, an LLM autonomously exploited a Langflow vulnerability, harvested credentials, moved laterally to a production database, and executed a complete database-extortion playbook with no human driving HiddenLayer Q2 2026 Report Highlights AI Agent and Supply Chain Threats
has been confirmed. Compromised Langflow Check Point’s 2026 Report Highlights Social Engineering and Unmonitored Infrastructure Risks

CVE (304)

Malware (83)

People (69)

Threat Actors (79)

MITRE ATT&CK (88)

Vendors (95)

Products (291)

Tools (43)

Industries (36)

Countries (34)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.