AIBleepingComputerabout 2 hours ago
Langflow flaw exploited to steal OpenAI, AWS keys
1 min read
Attackers are exploiting CVE-2026-0768, a critical unauthenticated remote code execution flaw in Langflow, to steal OpenAI and AWS keys. VulnCheck detected 360 attacks, primarily from Russia, targeting U.K. honeypots. The flaw affects versions 1.4.2 and earlier; upgrading to 1.11.6 addresses all known flaws.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
