Langflow's Critical Authenticated code to be run remotely Flaw Targeted in 1,423 Honeypot Exploit Attempts

What happened

In February 2025, DataStax, the parent company of Langflow, was acquired by IBM. "Any authenticated Langflow user can achieve Remote Code Execution (RCE (running programs on a machine from somewhere else)) on the server by adding an MCP server with the 'stdio' transport," reads an advisory released last month.

Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic (AI that carries out multi-step tasks rather than answering one question) workflows.

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts  Ravie Lakshmanan  Oct 15, 2026 Vulnerability / Artificial Intelligence Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. The vulnerability in question is CVE-2026-105740 (CVSS score: 9.9), a case of authenticated remote code execution impacting versions prior to 1.9.0.

The crux of the vulnerability is that Langflow accepts a user-provided command without restricting it to approved executables. This, in turn, can lead to shell execution.