active exploitation

Jun 19, 2026 5 min read

Langflow CVE-2026-5027: AI Dev Platform Under Active Attack

A path traversal vulnerability in Langflow's file API allows unauthenticated attackers to overwrite arbitrary files and chain to RCE. Active exploitation confirmed in June 2026. Fix is in version 1.9.0.

img of LiteLLM RCE: CVE-2026-42271, CISA KEV

Jun 9, 2026 3 min read

Vulnerabilities

LiteLLM RCE: CVE-2026-42271, CISA KEV

CISA added CVE-2026-42271 to KEV after Horizon3.ai chained the LiteLLM MCP command injection flaw with a Starlette auth bypass for unauthenticated RCE. Federal deadline: June 22.