Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Summary

Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. The vulnerabilities in question are listed below - CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user. CVE-2026-66066 aka

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.