AI agent incident

Attackers exploited a critical Langflow flaw for credential probing and command and control

Reported · 2 sources · CVE-2026-0768

What happened

CVE-2026-0768, rated CVSS 9.8, lets an unauthenticated attacker run code as root on Langflow. Both outlets reported active exploitation, used for credential probing and command-and-control activity.

Why it matters

Langflow is where agent workflows and the credentials they carry get assembled, so root on the host is root on the workflow. It is the second actively exploited critical Langflow flaw in this database inside a month.

Sources

  1. The Hacker News Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
  2. Dark Reading Critical Langflow Vulnerability Exploited as Attacks on AI Platform Rise

New incidents by email

Get incidents like this one in your inbox

New AI agent incidents are covered in the briefing, with what to check on the agents you already run. At least once a week, free.

You confirm by email. Unsubscribe in one click.

Background reading

What is agent identity? An explainer on the problem behind this incident.

Cite or correct this record

“Attackers exploited a critical Langflow flaw for credential probing and command and control.” The Permission Layer AI Agent Incident Database, https://thepermissionlayer.com/incidents/langflow-credential-probing-c2/. Database updated October 22, 2026.

Every record traces to the dated sources above. If something here is wrong or missing, email [email protected] and it gets fixed. See this record in the full list.

The Permission Layer

Get the briefing by email

At least one email a week on AI agent identity, permissions, security and spend, written for the people who approve agent access. Five-minute read, free.

You confirm by email. Unsubscribe in one click.