Path traversal flaw in AI dev platform Langflow exploited in attacks
Medium Severity
Americas
Anguilla
Date OccurredJun 10, 202621:23 UTC
Event TypeCyber Intelligence
SourceBleepingComputer
RecordedJun 10, 2026
Full Description
Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers. [...]