Affected Systems

Langflow (CVE-2026-0768, CVSS 9.8) - arbitrary Python code execution as root via improper input validation. Ruby on Rails (CVE-2026-66066 aka KindaRails2Shell, CVSS 9.5) - arbitrary file read and RCE affecting applications using libvips for Active Storage image processing that accept untrusted image uploads. Over 7,100 vulnerable Rails instances and numerous Langflow hosts exposed globally, primarily in US, Germany, Malaysia, Brazil, India, UK, Singapore, and Israel.

Exploitation Status

Active exploitation confirmed. VulnCheck recorded 360+ detections for CVE-2026-0768 as of September 1, 2026, with attacks originating primarily from Russia targeting UK systems. CVE-2026-66066 exploitation detected from France establishing C2 to Israel. Attackers conducting credential harvesting (LANGFLOW_SUPERUSER, OPENAI_API keys, AWS credentials, secret_key_base, database passwords), dropping cryptominers, proxy agents, and remote access tools (SimpleHelp). Part of broader campaign exploiting 12 vulnerabilities with 15,000+ successful attempts since 2025.

Business Impact

Immediate risk to organizations running Langflow AI development platforms or Ruby on Rails applications with image upload functionality. Successful exploitation grants root-level access, exposes cloud credentials (AWS, API tokens), database passwords, and Rails master keys. Attackers are weaponizing access for cryptocurrency mining, establishing persistent remote access, and pivoting to additional targets. AI development platforms represent high-value targets due to access to sensitive credentials and connected cloud environments. Note: CVE-2026-66066 patch (Rails 8.1.3.1) blocks libvips file read but does not fully neutralize RCE gadget via Marshal deserialization.

Urgency

🔴 Immediate

Recommended Actions

  • Immediately patch Langflow to the latest version addressing CVE-2026-0768 and audit systems for indicators of compromise: check /root/.cache/langflow/secret_key, .ssh access logs, .bash_history, and environment variables (LANGFLOW_SUPERUSER, OPENAI_API*, AWS_ACCESS*, AWS_SECRET*)
  • Update Ruby on Rails to version 8.1.3.1 or later for CVE-2026-66066, but note the patch does not fully mitigate RCE via Marshal deserialization; disable libvips image processing for untrusted uploads or implement strict upload validation until complete fix is available
  • Rotate all exposed credentials including Rails secret_key_base, master keys, database passwords, cloud storage credentials (AWS, Azure, GCP), and API tokens on affected systems
  • Monitor network traffic for C2 connections to known malicious IPs (France, Israel, Russia) and scan for cryptominer processes, proxy agents, SimpleHelp installations, and Python credential harvesters on Langflow and Rails hosts
  • Review auditd logs for tampering or disablement and implement file integrity monitoring on critical paths (/root/.cache, .ssh directories) to detect credential harvesting and lateral movement attempts