Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Threat actors are exploiting two critical vulnerabilities in Langflow and Ruby on Rails, according to VulnCheck. The flaws, including CVE-2026-0768 with a CVSS score of 9.8, allow arbitrary code execution. Attacks involve credential probing and command-and-control activities, posing serious risks to affected systems.