Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

As cited

Copy frozen at 2026-09-01 08:43 UTC (site build).

vulnerabilities

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Threat actors are actively exploiting critical vulnerabilities in Langflow and Ruby on Rails to conduct credential-probing and command and control activities. CVE-2026-0768 in Langflow has a CVSS score of 9.8 and allows arbitrary Python code execution as the root user through insufficient input validation. A second critical flaw in Rails, CVE-2026-66066, is also being targeted in the campaign.

Why it matters: Organizations running Langflow or Ruby on Rails face immediate risk of code execution and credential theft; patch these critical vulnerabilities and hunt for exploitation indicators in your environment today.

Source published

2026-09-01 07:22 UTC

First seen by Cybersecurity Tracker

2026-09-01 08:27 UTC