AIBleepingComputer2 days ago
Langflow path traversal flaw exploited in attacks
1 min read
Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in Langflow's file upload endpoint. The flaw allows writing arbitrary files on exposed servers. Tenable discovered the issue and disclosed it on March 27, 2026. A patch was released in Langflow version 1.9.0.
Level
Hype check
Tap to vote and see what everyone thinks.
