News
cybersecurity BTCPay Server warns of hot wallet thefts targeting outdated instances - BleepingComputer cybersecurity Microsoft's AI Risk Report Misses This Key Detail - Dark Reading cybersecurity Mutipath TCP: Use and Detection, (Mon, Nov 2nd) - SANS Internet Storm Center cybersecurity DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment - The Hacker News cybersecurity Hackers disrupt refrigeration systems at European supermarkets - BleepingComputer cybersecurity PapRAT Cyber Espionage Campaign Leaves a 'BITTER' Taste in South Asia - Dark Reading threat-intel Shutting the Door on the XCPE Botnet - Google Threat Intelligence Group cybersecurity Microsoft fixes Smart App Control broken by October Windows update - BleepingComputer cybersecurity Revolve Data Breach Impacts at Least 180,000 People - SecurityWeek ai Stop counting tokens, start counting what ships - MIT Technology Review ai The Download: the agentic web arrives and the drive for safer roads - MIT Technology Review cybersecurity Over 1,000 GitLab servers vulnerable to ongoing RCE attacks - BleepingComputer cybersecurity iPhone Jailbreak Vulnerabilities Put Crypto Wallet Seed Phrases at Risk on Older Devices - CyberPress threat-intel Unpatchable Hardware Flaws in Older iPhones Allow Attackers to Steal Crypto Wallet Recovery Phrases - GBHackers threat-intel New ChatGPT Phishing Kit Uses Rotating WordPress Websites to Steal Payment Details and OTPs - GBHackers
1 / 15
All news ›
Cybersecurity

Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

The Hacker News ·

Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week. Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports go to IBM. Every release from 1.0.0 through 1.12.8 has the flaws, and the only fix is version 1.13.0. Neither flaw is in CISA's Known

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.