Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

A critical remote code execution vulnerability (CVE-2026-105740, CVSS 9.9) in Langflow, an open-source AI application and agentic workflow platform, is being actively exploited by threat actors. Security firm Previdian issued an alert regarding the exploitation activity. Langflow is maintained by DataStax, which was acquired by IBM in February 2025. The vulnerability is classified as an authenticated RCE flaw, indicating attackers need some level of authentication to exploit it. Honeypot data reveals 1,423 exploit attempts have been recorded, demonstrating active and widespread exploitation in the wild. The high CVSS score of 9.9 underscores the severity of the flaw. Organizations using Langflow are strongly advised to patch or mitigate immediately given the active exploitation.