Critical Authenticated RCE in Langflow Hit by 1,423 Honeypot Exploit Attempts

A critical vulnerability, CVE-2026-105740 (CVSS 9.9), in the open-source AI platform Langflow is being actively exploited, according to an alert from Previdian. Attackers have made 1,423 exploit attempts against honeypots targeting the authenticated remote code execution flaw.

• CVE-2026-105740 carries a CVSS score of 9.9
• 1,423 exploit attempts observed via honeypots
• Langflow is an open-source AI and agentic workflow platform
• Langflow is owned by IBM, which acquired DataStax in 2025