Critical Langflow flaw exploited to steal OpenAI and AWS keys

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys. [...]

Original reporting by BleepingComputer · Bill Toulas. GridIndex is an aggregation and intelligence layer — full credit to the original publisher.