Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
Tue Sep 01 2026
Open Source
Vulnerability
feeds.feedburner.com
Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck.
The vulnerabilities in question are listed below -
CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user.
CVE-2026-66066 aka