Wednesday, May 7, 2025

Critical 9.8 Langflow RCE bug added to CISA vulnerability list | SC Media

Critical 9.8 Langflow RCE bug added to CISA vulnerability list | SC Media

Excerpt: ″“Attackers have already exploited this flaw, deploying reverse shells and crypto-miners,” said Saeed Abbasi, manager of vulnerability research at the Qualys Threat Research Unit. “Even on isolated development VMs, a breached Langflow instance can serve as a launchpad for infiltrating corporate networks. This flaw transforms a single point of failure into a silent amplifier of chaos.”″

Source: scworld.com