Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Summary: Previdian recorded 1,423 exploitation attempts against its honeypots for CVE-2026-105740, a CVSS 9.9 authenticated remote code execution flaw in Langflow versions prior to 1.9.0, with activity from 27 unique IP addresses across 15 countries and a spike to 333 attempts on October 11, 2026. The flaw lets any authenticated user, including non-admin accounts, pass an unvalidated command through an MCP server's stdio transport that runs via bash -c with no allowlisting or sandboxing, and the malicious configuration persists and re-executes each time the server list loads.
What's compelling: Attackers reached the vulnerable endpoint by authenticating with a common username and password, so the authentication requirement is not a barrier - and the total has since climbed to 1,706 attempts from 28 IP addresses, with one IP, 192.255.229[.]92, also working Flowise and three other Langflow flaws.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-0768CVE-2026-105697CVE-2026-105740CVE-2026-55255CVE-2026-69255CVE-2026-9198
- Related
- CVE-2026-9198: IBM Langflow Code Injection Vulnerability Known Exploited Vulnerabilities · Aug 04, 2026CVE-2026-55255: Langflow Authorization Bypass Through User-Controlled Key Vulnerability Known Exploited Vulnerabilities · Jul 07, 2026