# Langflow flaw draws 1,423 exploit attempts against honeypots

_Published Thursday, October 15, 2026 at 5:43 AM EDT · Security, AI · Latest · Tier 2 — Notable_

![Langflow flaw draws 1,423 exploit attempts against honeypots — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1tlAL_zc7Hg-gD5PRFa08hoOp2KRDu9kNSJk8nhZ91us8q-K7qGfnoasa6gONBjZoEtGJqPEZY3rKMy4Uqozk89X-L7IQBV8IrDqnJYdtAsCC4d08mmQUI4r_zACmvDVdey82w7FC4lTIoYfqdwYYu2Bp_Ql0AwOB54KRYrHk9ixjo27rKLWEK0dwsfw3/s1700-nu-rw-lo-l85-e365/langflow.jpg)

Attackers have made 1,423 exploitation attempts against Previdian's honeypots targeting a critical Langflow vulnerability, The Hacker News reported. The flaw, CVE-2026-105740, affects versions before 1.9.0 and lets authenticated users, including non-admin accounts, execute commands on the server.

Langflow passes commands from configurations for external tool servers directly to a shell without validation or sandboxing. Malicious configurations persist and execute again when the server list loads. Previdian recorded attempts from 27 attacker IP addresses since September 19, including 66 on October 15. In one observed sequence, attackers authenticated with a common username and password before accessing the vulnerable configuration endpoint.

## Sources

- [The Hacker News](https://thehackernews.com/2026/10/langflows-critical-authenticated-rce.html)

---
Canonical: https://techandbusiness.org/newswire/NASmD7SDIXrBC6s7mTPovp
Published: 2026-10-15T09:43:46.350Z
Story chronology: 2026-10-15T07:07:05.000Z
Retrieved: 2026-10-15T12:25:00.287Z
Publisher: Tech & Business (techandbusiness.org)