IBM's agentic AI platform is under active attack - patch now

A critical vulnerability in IBM-owned, low-code AI builder Langflow lets unauthenticated attackers execute code remotely on ...

Critical RCE in IBM Langflow Triggers CISA Emergency Deadline

Federal agencies have until August 7, 2026, to remediate or disconnect assets affected by a critical vulnerability in IBM Langflow, tracked as CVE-2026-9198. This mandate follows the inclusion of the ...
Forkast NewsOpinion

Seven Critical CVEs in 18 Months: Langflow’s Architecture Is the Vulnerability

The CISA deadline has passed. Organizations still running IBM Langflow are now in active-exploitation territory — and the ...
Dark Reading

Hackers Exploit Critical Langflow Flaw to Unleash Flodrix Botnet

Attackers are actively targeting a critical flaw in a popular Python-based Web app for building AI agents and workflows to unleash a powerful botnet that can cause full system compromise, distributed ...
Dark Reading

'Easily Exploitable' Langflow Vulnerability Requires Immediate Patching

A critical flaw found in the open source Langflow platform was added to the US Cybersecurity and Infrastructure Security Agency’s (CISA's) Known Exploited Vulnerabilities (KEV) catalog. Langflow is a ...
heise online

Patch now! Warning about malware attacks on FreeType and Langflow

Attackers are currently exploiting software vulnerabilities in FreeType and Langflow and compromising systems by executing malicious code. In both cases, security patches are available, which admins ...