Affected Systems

Langflow (CVE-2026-0768, CVSS 9.8): arbitrary Python code execution as root via improper input validation. Ruby on Rails (CVE-2026-66066 aka KindaRails2Shell, CVSS 9.5): unauthenticated arbitrary file read, secret leakage, and RCE in applications using libvips for Active Storage image processing that accept untrusted image uploads. Over 7,100 exposed Rails instances identified; vulnerable Langflow hosts concentrated in US, Germany, Malaysia, Brazil, and India.

Exploitation Status

Active exploitation confirmed. VulnCheck recorded 360+ detections for CVE-2026-0768 as of September 1, 2026, with attacks originating primarily from Russia targeting UK systems. CVE-2026-66066 exploitation observed from France establishing C2 to Israel, targeting canaries in Singapore, Israel, and UK. Attackers conducting credential harvesting (AWS keys, OpenAI API tokens, secret_key_base), dropping crypto miners, proxy agents, and remote access tools (SimpleHelp).

Business Impact

Immediate risk of full system compromise. CVE-2026-0768 grants root-level Python execution on Langflow instances, exposing AI development environments, cloud credentials (AWS, OpenAI API keys), and connected systems. CVE-2026-66066 enables unauthenticated attackers to extract Rails secrets, database passwords, and cloud storage credentials, leading to RCE. Observed post-exploitation includes cryptomining botnet enrollment, credential theft, lateral movement, and C2 establishment. VulnCheck notes the Rails patch (8.1.3.1) blocks libvips file read but does not neutralize Marshal deserialization RCE gadget. Organizations using AI platforms or Rails with image upload functionality face credential theft and infrastructure takeover.

Urgency

🔴 Immediate

Recommended Actions

  • ["Immediately identify and isolate all Langflow instances; apply vendor patches for CVE-2026-0768 and audit for indicators of compromise including unauthorized .ssh access, modified .bash_history, and presence of .sysd or Python credential harvesters."]
  • ["For Ruby on Rails applications using Active Storage with libvips image processing: upgrade to patched version 8.1.3.1 or later, disable untrusted image uploads, or switch to alternative image processors until full mitigation is confirmed."]
  • ["Hunt for exploitation indicators: outbound connections to Russia, France, or Israel; queries for environment variables (LANGFLOW_SUPERUSER, OPENAI_API*, AWS_ACCESS*, AWS_SECRET*); access to /root/.cache/langflow/secret_key; XMR miner processes; SimpleHelp or proxy agent installations."]
  • ["Rotate all exposed secrets immediately: Rails secret_key_base, master keys, database passwords, AWS credentials, OpenAI API tokens, and cloud storage credentials on affected or potentially affected systems."]
  • ["Monitor network traffic for C2 beaconing and block known malicious IPs; enable auditd logging on Linux systems (attackers have been observed disabling it); review firewall rules to restrict unnecessary external access to Langflow and Rails application servers."]