2026-03-17 · 2026-Q1
Langflow RCE Exploited Within 20 Hours
PrimaryL5ConfigSecondaryL1Credential
- Fixable:
- Yes, vendor patch
- Vendor response:
- Patched
- In the wild:
- Yes
- Actor:
- Attacker
Target
Langflow (all versions through 1.8.1)
Impact
Attackers built working exploits within 20 hours; harvested OpenAI, Anthropic, and AWS API keys from compromised instances
Root Cause
POST endpoint accepts arbitrary Python code in node definitions, executed server-side without sandboxing