Langflow RCE Exploited in the Wild: Attackers Stripping OpenAI and AWS Keys from AI Servers
Langflow’s code validator just became the newest way to lose your cloud keys An open-source RCE bug in Langflow sat unpatched for about seven months before anyone started hammering it. Now they are, hard. Threat actors are exploiting CVE-2026-0768, an unauthenticated remote code execution flaw in the custom component editor’s code validator, to walk onto…