Langflow & Ruby On Rails: Critical vulnerabilities actively exploited

Secnews.Gr • September 1, 2026

Share: View original

Our Web Application Firewall has detected potentially malicious activity in your request and blocked access to protect our website and users.

Your request contained patterns that match known attack signatures

Suspicious SQL injection or XSS attempts were detected

Malformed data or unusual request parameters were found

Your request triggered our automated security rules

Wait a few minutes and try again with a normal request

Check if you're using any automated tools or scripts

Ensure your browser is up to date and cookies are enabled

Try accessing the site from a different network

If you believe this is an error and you were blocked incorrectly, please our technical support team.

Email: @secnews.gr

Please include the Ray ID: a346a1091b2cbd6e

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Active Exploitation of Langflow and Ruby on Rails Vulnerabilities Critical vulnerabilities in Langflow and Ruby on Rails have been actively exploited, raising significant credential risks. Attackers are leveraging these flaws to execute unauthorized actions, potentially compromising user credentials. The vulnerabilities affect web applications utilizing these frameworks, and the exploitation has been confirmed by multiple security sources. Organizations using Langflow or Ruby on Rails are urged to assess their systems for exposure. Specific CVEs have not been disclosed in the articles, but the threat is considered serious due to the active exploitation reports. Security teams should prioritize monitoring and patching efforts to mitigate risks. The current status indicates ongoing attacks, necessitating immediate attention from affected organizations. 2 sources 68

Extracted Entities

Attack Types (2)

Cross-site Scripting Sql Injection

CWE Weaknesses (2)

Cwe-79 - Cross-site Scripting (xss)Cwe-89 - SQL Injection

Domains (1)

MITRE ATT&CK (1)

T1190 - Exploit Public-Facing Application

Platforms (1)