Case langflow-cve-2026-0768-key-theftAI supply chainWorldwide
Langflow CVE-2026-0768 unauthenticated root RCE exploited to steal AI and cloud keys
Attackers began exploiting CVE-2026-0768, a CVSS 9.8 unauthenticated remote code execution flaw in the Langflow AI app builder, around Aug 29-30, 2026. Reported post-exploitation activity includes theft of secrets such as OpenAI API keys and AWS credentials, followed by attempted lateral movement. VulnCheck observed the exploitation and F5 honeynet data showed multi-source attempts. The specific actors and victims have not been named in the sources.
CriticalAttack on AIStatus: OngoingVerified case file
Open in the interactive mapCite this case
- Reported
- Sep 1, 2026
- Location
- Worldwide
- Target
- Internet-exposed Langflow AI workflow deployments
- Severity
- Critical
- Verification
- Reported by credible press or researchers
- Triggered by
- Unknown
- Actor type
- Unknown
- Sector
- Technology & AI vendors
- Reported loss
- None reported
- CVE
- CVE-2026-0768
What happened
Attackers began exploiting CVE-2026-0768, a CVSS 9.8 unauthenticated remote code execution flaw in the Langflow AI app builder, around Aug 29-30, 2026. Reported post-exploitation activity includes theft of secrets such as OpenAI API keys and AWS credentials, followed by attempted lateral movement. VulnCheck observed the exploitation and F5 honeynet data showed multi-source attempts. The specific actors and victims have not been named in the sources.
Impact: AI API keys harvested from affected Langflow instances. Number of victims and losses are unknown.
Who triggered it
Actor: Unknown
Attribution: Not stated in the headline; the actor is unknown.
Motive: Apparently theft of AI API keys for resale or abuse.
How it happened
Attack vector: Exploitation of vulnerability CVE-2026-0768 in Langflow.
Root cause: Software flaw in Langflow, tracked as CVE-2026-0768. Specific technical details are not given.
Timeline
- Reported by OrcaRouter
Response
Unknown; the headline gives no details on patching or advisories.
Current status: Ongoing
Research warnings this case matches
- Seen in real incidents AI systems themselves become targets · International AI Safety Report
- Seen in real incidents Privacy and security · MIT AI Risk Repository
Compared with published AI risk research from several institutes on the Research vs reality page.
Sources (open in a new tab)
- OrcaRouter news.google.com
- SecurityWeek securityweek.com
- F5 Labs f5.com
Cite this case
Langflow CVE-2026-0768 unauthenticated root RCE exploited to steal AI and cloud keys. AI Threat Watch, case langflow-cve-2026-0768-key-theft, Sep 1, 2026. https://aithreat.io/cases/langflow-cve-2026-0768-key-theft/
Permanent link: https://aithreat.io/cases/langflow-cve-2026-0768-key-theft/
Related cases
The same type of incident, most recent first.