Exploitation of Langflow Flaws via Commodity Crawlers

• •Two CVEs (CVE-2025-3248, CVE-2026-0770) exploited in Langflow with thousands of attempts.
• •95% of attacks traced to two hosting providers, indicating concentrated malicious activity.
• •Significant SSH and Remote Desktop crawling observed, emphasizing the need for immediate patching.

Adversaries have exploited two known remote code execution vulnerabilities in the AI application platform Langflow, specifically CVE-2025-3248 and CVE-2026-0770. These exploits were detected during a period of active commodity crawling, with 3,968 and 4,770 connection attempts recorded respectively. Approximately 95% of the malicious activity originated from two hosting providers, indicating a concentrated source of attacks. The attackers also engaged in SSH enumeration and credential attacks, with four hosts accounting for 36% of alternative-port SSH crawling. Additionally, one address was responsible for over half of the Remote Desktop crawling observed. GreyNoise has advised users to patch Langflow and monitor the identified sources for malicious activity. The vulnerabilities were added to CISA's Known Exploited Vulnerabilities catalog, highlighting their active exploitation status.