#langflow
-
Hackers Launch Mass Attacks on Critical Langflow and Ruby on Rails Vulnerabilities
VulnCheck researchers have observed active exploitation of two critical flaws in the AI platform Langflow and in Ruby on Rails: attackers are hunting for credentials and standing up command infrastructure.
-
CISA Adds Actively Exploited Flaws in Langflow, Tomcat and N-central to Its Catalog
On August 5, 2026, CISA added three vulnerabilities to its KEV catalog, citing evidence that they are being exploited in real-world attacks. One of the flaws is tied to an autonomous AI-driven hacking campaign.
-
CISA Orders Urgent Patching of Langflow RCE Flaw
The U.S. cyber agency has directed government bodies to urgently remediate an actively exploited vulnerability in Langflow — a visual framework for building AI agents — that grants remote code execution with root privileges.
-
JadePuffer arms itself with the EncForge ransomware to attack AI model data
The autonomous AI agent JadePuffer has acquired specialized malware called EncForge, which encrypts training datasets, vector databases and model checkpoints. Sysdig estimates that the damage to a single model could run from $75,000 to $500,000.
-
CISA Orders U.S. Federal Agencies to Urgently Patch a Vulnerability in Langflow
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has directed federal agencies to remediate an actively exploited authentication bypass vulnerability in the Langflow platform by Friday.