# VulnCheck reports active exploitation of Langflow and Rails flaws

_Published Tuesday, September 1, 2026 at 5:06 AM EDT · Security · Latest · Tier 2 — Notable_

![VulnCheck reports active exploitation of Langflow and Rails flaws — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9_EygYWh8fZRphLL1V9dg-h1jgQ0f9xmlVuPwPAaaEUUCBkKbQ4nTaL27WIevCJg42GWtDGMKyRvzBUz9MWtD2FxPx7vCKwXLirO-N1YRcpPy0mX_B_fTG2gBS-JPRJGXfCh_I2yHJgoi1V5lve7Opcm-M0ApWs6gohPjNhBi-0CsP49guHlM2lzHLsiD/s1700-nu-rw-lo-l85-e365/lang.jpg)

Threat actors are exploiting critical vulnerabilities in Langflow and Ruby on Rails, according to VulnCheck. The reported Langflow flaw, CVE-2026-0768, can permit arbitrary Python execution as root, while the Rails issue CVE-2026-66066 can expose files, process secrets and credentials and lead to remote code execution under specified conditions. VulnCheck said it recorded more than 50 detections within hours on August 30, rising to 360 by Monday, with activity probing for cloud and OpenAI-related credentials.

## Sources

- [The Hacker News](https://thehackernews.com/2026/09/attackers-exploit-critical-langflow-and.html)
- [SecurityWeek](https://www.securityweek.com/hackers-start-exploiting-critical-langflow-vulnerability/)

---
Canonical: https://techandbusiness.org/newswire/0raDZMSEKa1_giXaSl5xZQ
Published: 2026-09-01T09:06:13.824Z
Story chronology: 2026-09-01T07:22:30.000Z
Retrieved: 2026-10-16T13:06:49.219Z
Publisher: Tech & Business (techandbusiness.org)