Critical RCE Flaw in Langflow AI Framework Exploited to Steal AWS and OpenAI Keys

Threat actors are actively exploiting a critical unauthenticated remote code execution vulnerability (CVE-2026-0768) in the open-source Langflow framework. Attackers are utilizing the exploit to harvest administrative credentials, OpenAI API keys, and AWS secrets directly from environment variables. Security firm VulnCheck has observed 360 targeted exploitation attempts so far, with attack traffic originating primarily from Russia. The security issue resides in the code validator of Langflow’s custom component editor and affects versions 1.4.2 and earlier. Users are urged to update to version 1.11.6, which mitigates this flaw alongside several other code-injection vulnerabilities exploited earlier this year. "Among other things, attacker requests are querying environment variables (LANGFLOW_SUPERUSER, OPENAI_API*, AWS_ACCESS*, AWS_SECRET*), reading /root/.cache/langflow/secret_key, and checking .ssh access and .bash_history size." — Caitlin Condon