Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Notícia de segurança recolhida automaticamente.

Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck.

The vulnerabilities in question are listed below -


  CVE-2026-0768 (CVSS score: 9. - A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user.
  CVE-2026-66066 aka

Fonte original: Ler artigo completo aqui