Active Exploitation of Langflow Authenticated RCE Vulnerability Observed in Honeypot Monitoring

Security researchers and honeypot operators have detected active exploitation of a critical authenticated remote code execution vulnerability in Langflow, an open-source platform for building AI applications and agentic workflows. According to alerts cited by Previdian and reported by The Hacker News, the flaw tracked as CVE-2026-105740 carries a CVSS score of 9.9, reflecting its severe severity.

The exploitation campaign has been significant in scale, with 1,423 honeypot exploit attempts observed targeting Langflow instances. The vulnerability requires authenticated access, meaning attackers must first obtain valid credentials, but once authenticated, they can execute arbitrary code on the underlying system.

Langflow is used by developers to construct AI applications and automated workflows. The platform's integration with various AI models and data sources makes a successful RCE exploit particularly impactful, as it could allow threat actors to manipulate AI outputs, exfiltrate sensitive training data, or pivot into connected infrastructure.

DataStax, the commercial entity behind Langflow, was acquired by IBM in February 2025. Users are advised to consult official Langflow and IBM security advisories for patch information and recommended mitigation steps. The exploitation activity underscores the importance of applying security updates promptly and reviewing authentication controls for Langflow deployments.