Cybersecurity articles tagged #Langflow on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/encforge-ransomware-targets-ai-systems-via-langflow-rcehttps://runtimerebel.com/blog/encforge-ransomware-targets-ai-systems-via-langflow-rceNew ENCFORGE ransomware, attributed to JADEPUFFER, leverages a Langflow RCE vulnerability to encrypt AI model files, weights, and training data.Tue, 21 Jul 2026 10:39:45 GMTENCFORGERansomwareJADEPUFFERLangflowRCEAISysdigGolanghttps://runtimerebel.com/blog/cve-2024-37014-cisa-orders-federal-agencies-to-patch-langflowhttps://runtimerebel.com/blog/cve-2024-37014-cisa-orders-federal-agencies-to-patch-langflowCISA added CVE-2024-37014, a critical authentication bypass in the Langflow AI framework, to its KEV catalog following reports of active exploitation.Wed, 08 Jul 2026 10:23:08 GMTCVE-2024-37014LangflowCISA KEVAI Securityhttps://runtimerebel.com/blog/jadepuffer-first-llm-driven-ransomware-leverages-langflow-flawhttps://runtimerebel.com/blog/jadepuffer-first-llm-driven-ransomware-leverages-langflow-flawAnalysis of JadePuffer, the first reported LLM-driven ransomware, which exploited a Langflow vulnerability to exfiltrate database data and encrypt systems.Mon, 06 Jul 2026 21:41:23 GMTJADEPUFFERRansomwareLLM Driven AttackLangflowAI SecurityAgentic AIhttps://runtimerebel.com/blog/agentic-ai-automates-ransomware-attacks-via-langflow-exploitationhttps://runtimerebel.com/blog/agentic-ai-automates-ransomware-attacks-via-langflow-exploitationAgentic AI agents demonstrate automated multi-stage ransomware attacks using Langflow, raising concerns for AI development security and future threat automation.Fri, 03 Jul 2026 14:09:45 GMTAgentic AIRansomwareLangflowAI SecurityAutomated ExploitationLLM Agentshttps://runtimerebel.com/blog/jadepuffer-ai-agent-exploits-langflow-rce-for-automated-ransomwarehttps://runtimerebel.com/blog/jadepuffer-ai-agent-exploits-langflow-rce-for-automated-ransomwareThe threat actor JADEPUFFER has pioneered the use of AI agents to automate end-to-end ransomware attacks via Langflow RCE, from initial access to data wiping.Thu, 02 Jul 2026 10:44:26 GMTJADEPUFFERLangflowCVE-2024-28186AI RansomwareAutomated Attackshttps://runtimerebel.com/blog/cve-2024-5027-langflow-path-traversal-exploited-in-attackshttps://runtimerebel.com/blog/cve-2024-5027-langflow-path-traversal-exploited-in-attacksSecurity researchers observe active exploitation of CVE-2024-5027, a high-severity path traversal flaw in the Langflow AI platform allowing arbitrary file writes.Thu, 11 Jun 2026 05:41:21 GMTCVE-2024-5027LangflowAI SecurityPath TraversalRCEhttps://runtimerebel.com/blog/cve-2025-34291-cve-2023-41179-cisa-warns-of-active-exploitationhttps://runtimerebel.com/blog/cve-2025-34291-cve-2023-41179-cisa-warns-of-active-exploitationCISA adds Langflow and Trend Micro Apex One vulnerabilities to KEV. Learn how to mitigate CVE-2025-34291 and CVE-2023-41179 to prevent active exploitation.Fri, 22 May 2026 09:15:18 GMTCVE-2025-34291CVE-2023-41179LangflowTrend MicroCISA KEVRCEhttps://runtimerebel.com/blog/langflow-ai-platform-critical-code-injection-under-active-attackhttps://runtimerebel.com/blog/langflow-ai-platform-critical-code-injection-under-active-attackThreat actors are actively exploiting a critical code injection vulnerability in the Langflow AI platform, demanding immediate patching to prevent compromise.Thu, 26 Mar 2026 20:15:10 GMTLangflowAICode InjectionActive ExploitationCritical Vulnerabilityhttps://runtimerebel.com/blog/langflow-cve-2026-33017-ai-workflow-hijacking-under-active-exploitationhttps://runtimerebel.com/blog/langflow-cve-2026-33017-ai-workflow-hijacking-under-active-exploitationCISA warns of active exploitation of CVE-2026-33017 in Langflow, enabling attackers to hijack AI workflows and potentially compromise AI agents.Thu, 26 Mar 2026 20:14:50 GMTLangflowCVE-2026-33017AI SecurityWorkflow HijackingActive ExploitationCISAhttps://runtimerebel.com/blog/cve-2026-33017-langflow-code-injection-patch-immediatelyhttps://runtimerebel.com/blog/cve-2026-33017-langflow-code-injection-patch-immediatelyCISA adds actively exploited Langflow Code Injection Vulnerability (CVE-2026-33017) to KEV catalog. Critical patch urged for all organizations.Wed, 25 Mar 2026 20:18:12 GMTCVE-2026-33017LangflowCode InjectionCISA KEVActive Exploitationhttps://runtimerebel.com/blog/cve-2026-33017-critical-langflow-rce-exploited-within-20-hourshttps://runtimerebel.com/blog/cve-2026-33017-critical-langflow-rce-exploited-within-20-hoursCVE-2026-33017 is a critical RCE vulnerability in Langflow currently under active exploitation. Learn how to secure your AI orchestration and detect attacks.Fri, 20 Mar 2026 16:18:45 GMTCVE-2026-33017LangflowRCEAI SecurityActive Exploitation