Langflow CVE-2026-0768 exploited to steal OpenAI and AWS credentials

Affected Systems

Langflow versions 1.4.2 and earlier. The vulnerability exists in the code validator of the custom component editor's validate endpoint. Patched in version 1.11.6.

Exploitation Status

Active exploitation confirmed. VulnCheck detected 360+ attacks via honeypots, primarily from Russia. Attackers targeting LANGFLOW_SUPERUSER, OPENAI_API*, AWS_ACCESS*, AWS_SECRET* environment variables, /root/.cache/langflow/secret_key, SSH access, and bash history. No public PoC available.

Business Impact

Unauthenticated remote code execution with root privileges enables credential theft of OpenAI API keys, AWS secrets, and Langflow admin credentials. Organizations using Langflow for AI application development face immediate risk of cloud account compromise, unauthorized API usage costs, and data exfiltration. This is the sixth actively exploited Langflow vulnerability in 2026.

Urgency

🔴 Immediate

Recommended Actions

• Upgrade all Langflow instances to version 1.11.6 immediately
• Audit environment variables and rotate all exposed credentials: LANGFLOW_SUPERUSER, OPENAI_API keys, AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY
• Review /root/.cache/langflow/secret_key and .bash_history for signs of unauthorized access
• Monitor AWS CloudTrail and OpenAI API usage logs for anomalous activity originating from compromised keys
• Restrict network access to Langflow instances using firewall rules or VPN; block inbound traffic from untrusted sources