VulnCheck reports active exploitation of Langflow and Rails flaws

Threat actors are exploiting critical vulnerabilities in Langflow and Ruby on Rails, according to VulnCheck. The reported Langflow flaw, CVE-2026-0768, can permit arbitrary Python execution as root, while the Rails issue CVE-2026-66066 can expose files, process secrets and credentials and lead to remote code execution under specified conditions. VulnCheck said it recorded more than 50 detections within hours on August 30, rising to 360 by Monday, with activity probing for cloud and OpenAI-related credentials.