CTI · corroborated · 2026-09-02

Hackers Start Exploiting Critical Langflow Vulnerability

Full story & timeline

MITRE ATT&CK

• T1190 Exploit Public-Facing Application Initial Access
• T1552 Unsecured Credentials Credential Access

Indicators

No curated indicators tied to this case.

Detections

Detection content derived from this case analysis. Status: experimental — not validated against live telemetry.

Sigma raw

title: Langflow CVE-2026-0768 Exploitation - Environment Variable Harvesting
id: d0b6e4f7-25c9-6a1d-e8b4-6f0c2d5a1b7e
status: experimental
description: >
    Detects exploitation of CVE-2026-0768 in Langflow, an unauthenticated
    RCE vulnerability in the custom-component editor (securityweek, 2026).
    Attackers query environment variables for Langflow superuser credentials,
    OpenAI API keys, and AWS access keys. The campaign also targets the
    Langflow secret key and checks SSH accessibility. Traffic originates
    primarily from Russia.
references:
    - https://securityweek.com
    - https://bleepingcomputer.com
author: Tia N. List
date: 2026/09/02
tags:
    - attack.t1190
    - attack.t1552
logsource:
    category: process_creation
    product: linux
detection:
    selection_env_harvest:
        Image|endswith:
            - '/python'
            - '/python3'
        CommandLine|contains:
            - 'LANGFLOW_SUPERUSER'
            - 'OPENAI_API'
            - 'AWS_ACCESS'
            - 'AWS_SECRET'
            - 'secret_key'
    selection_langflow_process:
        CommandLine|contains:
            - '/root/.cache/langflow/'
            - 'langflow'
            - '.bash_history'
    condition: selection_env_harvest or selection_langflow_process
falsepositives:
    - Legitimate Langflow administration or debugging
level: high

References

• https://securityweek.com
• https://bleepingcomputer.com