CISA orders Langflow auth bypass patch

CISA added the Langflow authorization bypass flaw (CVE-2026-55255) to its Known Exploited Vulnerabilities Catalog, ordering federal agencies to patch by Friday. Sysdig observed in-the-wild exploitation on June 25, with attackers pursuing code execution, second-stage implants, compute resources, and LLM or cloud credentials.