Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM. The vulnerability in question is CVE-2026-105740 (CVSS score: 9.9), a case of
Why This Matters
Publisher reporting describes a security event affecting february. BugSkan could not yet bind a CVE or affected version, so treat the source details as the current record.
Recommended Action
Confirm whether february is present in your environment, compare your versions against the report, and apply available vendor patches or mitigations.
CVE: CVE-2026-105740
Affected
Remote Code ExecutionLangflowCritical Authenticated RCEFlaw TargetedHoneypot Exploit AttemptsCVE-2026-105740