Attackers exploit CVE-2026-0768 in Langflow to siphon OpenAI and AWS keys

On September 1, 2026, VulnCheck observed mass exploitation of CVE-2026-0768, an unauthenticated remote code execution flaw in Langflow, used to harvest OpenAI and AWS keys from exposed instances. It is the sixth Langflow flaw exploited since January: any instance patched below 1.11.6 must be treated as compromised.