Threat Actors Exploit Critical Langflow and Ruby on Rails Vulnerabilities

VulnCheck researchers have identified active exploitation of two critical security flaws affecting widely used software platforms. The first, CVE-2026-0768, is a severe vulnerability in Langflow (CVSS score: 9.8) that stems from insufficient validation of user-supplied input. This weakness could be leveraged to execute arbitrary Python code within the context of the root user, potentially leading to complete system compromise. The second vulnerability, CVE-2026-66066, affects Ruby on Rails applications. While specific technical details were not fully available in the initial source material, VulnCheck has linked both flaws to ongoing credential-probing and command-and-control (C2) operations conducted by threat actors. The exploitation of these vulnerabilities poses significant risk to organizations relying on Langflow for AI workflow orchestration and Ruby on Rails for web application development. Mitigation efforts should prioritize applying available patches from the respective vendors and monitoring for indicators of compromise associated with the reported exploitation patterns.