Back Heise.De Patch now! Attackers target Langflow instances with malware
Due to ongoing attacks, admins must ensure their Langflow instances are up-to-date. Attackers are currently targeting systems and stealing admin credentials, among other things.
Langflow is an AI tool for developing and deploying AI-powered agents and workflows.
Security researchers from VulnCheck are warning of the attacks on . Attackers are remotely exploiting a “ critical ” security vulnerability (CVE-2026-0768) without authentication. Because user data is not sufficiently validated, attackers inject and execute malware on instances. This is done with root privileges, allowing attackers to take full control.
The security researchers state that they have observed more than 350 attempted attacks so far, with the number increasing. The vulnerability has been known since January of this year. A security patch has also been available since then. Langflow up to and including version 1.42 is vulnerable. The current release is 1.12.0. Apparently, however, vulnerable versions are still installed on some systems, allowing attackers to exploit them.
Most recently, there were attacks on Langflow in August of this year .
This article was originally published in German . It was translated with technical assistance and editorially reviewed before publication.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
