// AWSHIGH
Attackers are actively exploiting CVE-2026-0768, an unauthenticated remote code execution vulnerability in Langflow, to harvest AWS credentials from compromised instances. VulnCheck telemetry recorded 360+ exploitation detections within 48 hours as of September 2026. Adversaries extract AWS access and secret keys from environment variables, deploy cryptominers, and perform lateral movement across affected networks. The vulnerability, with CVSS score 9.8, remains actively weaponized alongside 11 other Langflow CVEs exploited in the wild throughout 2026.
// Get alerts for AWS