Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Threat actors are exploiting a critical security flaw in Langflow, an open-source platform for building AI applications, according to an alert from Previdian. The vulnerability, CVE-2026-105740 (CVSS score: 9.9), has been targeted in 1,423 honeypot exploit attempts. Langflow's parent company DataStax was acquired by IBM in February 2025.