2026-03-17 · 2026-Q1
Langflow RCE Exploited Within 20 Hours
Who wrote the file that runs on open?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- Yes
- Actor
- Attacker
Target
Langflow (all versions through 1.8.1)
Impact
Attackers built working exploits within 20 hours; harvested OpenAI, Anthropic, and AWS API keys from compromised instances
Root cause
POST endpoint accepts arbitrary Python code in node definitions, executed server-side without sandboxing
CVE
Sources
Catalog
Cite this: AgentProv incident record: Langflow RCE Exploited Within 20 Hours (2026-03-17). https://agentprov.com/incidents/2026-03-17-langflow-rce-exploited-within-20-hours
Related
- Also L5 · 2026-10-25Planted AGENTS.md in a Downloads Folder Got Codex to Install Malware; a CLAUDE.md Variant Exposed Claude Code's OAuth TokenL5Config
- Also L5 · 2026-10-21MCP Inspector Advisory Batch: Two Critical Paths From Connecting to a Malicious MCP Server to Local Command ExecutionL5Config
- Also L5 · 2026-10-16Claude Agent SDK: A Crafted Session ID Injects an MCP Server and Runs Commands Past SDK Permissions (CVE-2026-96620)L5Config