[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3I-Re-zIELAFQsaA8LHa2HbwO59lFdZ3A8AAN2mDmho":3},{"article":4,"iocs":49,"watch_terms":64,"solutions":65,"lesson":162},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"49f2faf9-2a98-4d2e-8a65-091acf2657af","Path traversal flaw in AI dev platform Langflow exploited in attacks","path-traversal-flaw-in-ai-dev-platform-langflow-exploited-in-attacks-a89bc9","Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers. [...]","Attackers are actively exploiting CVE-2026-5027, a critical path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers. The flaw allows unauthenticated attackers to write files to any location due to improper sanitization of filenames. Langflow users are urged to upgrade to version 1.10.0 to patch the vulnerability.","CVE-2026-5027 path traversal flaw in Langflow AI dev platform is actively exploited.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fpath-traversal-flaw-in-ai-dev-platform-langflow-exploited-in-attacks\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F06\u002F10\u002FLangflow.jpg","2026-06-10T21:23:44+00:00","2026-06-10T22:00:15.484122+00:00",9,[17,20,23],{"name":18,"type":19},"Langflow","product",{"name":21,"type":22},"AI development platform","technology",{"name":24,"type":25},"MuddyWater","threat_actor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,34,39,44],{"category":33},{"id":26,"icon":28,"name":29,"slug":30},{"category":35},{"id":36,"icon":28,"name":37,"slug":38},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54,57,59,61],{"type":51,"value":52,"context":53},"cve","CVE-2026-5027","Path traversal vulnerability in Langflow",{"type":51,"value":55,"context":56},"CVE-2026-0770","Previously exploited Langflow vulnerability",{"type":51,"value":58,"context":56},"CVE-2026-21445",{"type":51,"value":60,"context":56},"CVE-2026-33017",{"type":51,"value":62,"context":63},"CVE-2025-3248","Vulnerability previously warned about by CISA, linked to MuddyWater",[18],{"controls":66,"vendors":150},[67,96,121],{"slug":68,"name":69,"problem":70,"products":71},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[72,80,88],{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":97,"name":98,"problem":99,"products":100},"patch-management","Automated patch management","Known holes get closed in days, not months.",[101,105,113],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":97,"product_name":102,"url":103,"description":104},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":122,"name":123,"problem":124,"products":125},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[126,134,142],{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":143,"vendor_name":144,"vendor_logo":145,"product_slug":146,"product_name":147,"url":148,"description":149},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",[151,157],{"slug":152,"name":153,"logo_path":154,"roles":155},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png",[156],"reported_by",{"slug":158,"name":159,"logo_path":160,"roles":161},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png",[156],{"slug":163,"title":164,"body":165,"framework_refs":166,"framework_notes":172},"critical-path-traversal-vulnerability-in-langflow-ai-platform-under-active-attack","Critical Path Traversal Vulnerability in Langflow AI Platform Under Active Attack","Attackers are actively exploiting CVE-2026-5027, a critical path traversal vulnerability in Langflow that allows unauthenticated attackers to write arbitrary files to any server location. The vulnerability stems from improper input validation and sanitization of filenames, enabling attackers to bypass security controls and potentially achieve full system compromise. This attack highlights the critical importance of immediate patching for publicly disclosed vulnerabilities, especially in internet-facing AI development platforms that may contain sensitive code and data.",[167,168,169,170,171],"CIS Control 7","CIS Control 16","NIST SP 800-53 SI-2","NIST SP 800-53 SA-11","OWASP ASVS 5.3",{}]