{"schema_version":"0.10.0","id":"LR-2026-0799","record_version":1,"title":"Langflow 12th exploited CVE of 2026 fuels credential harvesting campaign","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":43.1,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":0.0,"completeness":2.88,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: Forkast · subject to change","original_document":null,"reports_total":1,"reports_independent":1,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"1 report: Forkast · subject to change"}]},"sources_hash":"001cf43badb9f9f721e0056c42fcecb313e0a84b069129fbed8a1f08f3b00a02"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-10-02","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"third_party","summary":"Langflow, an AI framework acquired by IBM through DataStax, was the target of a sustained exploitation campaign. The activity centers on CVE-2026-0768, an unauthenticated remote code execution flaw in the platform's code validator, first disclosed as a zero-day on 9 January 2026. Throughout 2026, twelve Langflow CVEs were reported exploited in the wild. VulnCheck recorded over 50 Canary detections on 30 August 2026, rising to more than 360 cumulative detections by 1 September 2026. Researchers documented over 15,000 successful exploitation attempts across three CVEs. Attackers were reported to pursue credential harvesting and cryptomining, and vulnerable internet-exposed hosts were concentrated in the United States. The sources do not state how the campaign ended or what affected parties lost.","tags":["credential-harvesting","cryptomining"],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":"Unauthenticated remote code execution flaw in the platform's code validator (CVE-2026-0768)","failure_class_detail":null,"responsible_party":null,"adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://forkast.news/langflows-12th-exploited-cve-of-2026-fuels-sustained-credential-harvesting-campaign/","publisher":"Forkast News","date":"2026-10-02","type":"press","title":"Langflow’s 12th Exploited CVE of 2026 Fuels Sustained Credential Harvesting Campaign - Forkast News","archived_url":null,"attachment":"first_report","independence":"independent"}],"per_field_confidence":{"event.incident_class":"C","event.detection_method":"C","event.root_cause_detail":"C","event.adversarial_actor":"C","event.tags":"C","impact.severity":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","context.country":"D","system.developer":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"event.incident_class":[{"source_index":0,"quote":"This activity centers on CVE-2026-0768, a CVSS 9.8 unauthenticated remote code execution (RCE) flaw in the platform’s code validator, initially disclosed as a zero-day by the Zero Day Initiative (ZDI) on January 9, 2026."}],"event.detection_method":[{"source_index":0,"quote":"Telemetry from VulnCheck confirms a sharp escalation in the exploitation of Langflow, an AI framework acquired by IBM through DataStax in 2024."}],"event.root_cause_detail":[{"source_index":0,"quote":"This activity centers on CVE-2026-0768, a CVSS 9.8 unauthenticated remote code execution (RCE) flaw in the platform’s code validator, initially disclosed as a zero-day by the Zero Day Initiative (ZDI) on January 9, 2026."}],"event.adversarial_actor":[{"source_index":0,"quote":"Attackers are leveraging this global footprint to execute two primary operational profiles: credential harvesting and cryptomining."}],"event.tags":[{"source_index":0,"quote":"Attackers are leveraging this global footprint to execute two primary operational profiles: credential harvesting and cryptomining."}],"impact.severity":[{"source_index":0,"quote":"By September 1, 2026, that figure climbed to more than 360 cumulative detections."}],"event.summary":[{"source_index":0,"quote":"Telemetry from VulnCheck confirms a sharp escalation in the exploitation of Langflow, an AI framework acquired by IBM through DataStax in 2024."},{"source_index":0,"quote":"This activity centers on CVE-2026-0768, a CVSS 9.8 unauthenticated remote code execution (RCE) flaw in the platform’s code validator, initially disclosed as a zero-day by the Zero Day Initiative (ZDI) on January 9, 2026."},{"source_index":0,"quote":"Throughout 2026, 12 distinct Langflow CVEs have been exploited in the wild, including 11 new vulnerabilities and one identified prior to the start of the year."},{"source_index":0,"quote":"On August 30, 2026, the firm recorded over 50 Canary detections within hours."},{"source_index":0,"quote":"By September 1, 2026, that figure climbed to more than 360 cumulative detections."},{"source_index":0,"quote":"Across CVE-2026-0769, CVE-2025-3248, and CVE-2026-5027, researchers have documented over 15,000 successful exploitation attempts."},{"source_index":0,"quote":"Geographic analysis of internet-exposed hosts shows a significant concentration of vulnerable infrastructure within the United States."},{"source_index":0,"quote":"Attackers are leveraging this global footprint to execute two primary operational profiles: credential harvesting and cryptomining."}]},"notes_on_gaps":"Single press source; no organisation report or government evaluator statement was provided. The source does not state that an autonomous agent was involved, so agent_involved and failure_class were left out. Trigger, date_occurred, date_disclosed, developer, responsible party, containment, remediation, direct loss, records exposed and affected party counts are not stated. The root cause is my judgement: the flawed code validator is recorded as a guardrail that failed. Severity moderate is my judgement from the stated detection counts, which are not counts of affected parties. Detection counts are not treated as affected-party counts. The article publication date was not used as a disclosure date because it is not a sentence in the text. The source names three CVEs but does not state how the twelve were distributed. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (1 report: Forkast · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"went_wrong","text":"A CVSS 9.8 unauthenticated remote code execution flaw in the platform's code validator was exploited, first disclosed as a zero-day on 9 January 2026.","quote":"This activity centers on CVE-2026-0768, a CVSS 9.8 unauthenticated remote code execution (RCE) flaw in the platform’s code validator, initially disclosed as a zero-day by the Zero Day Initiative (ZDI) on January 9, 2026.","source_index":0,"grade":"C"},{"step":"reached","text":"Twelve distinct Langflow CVEs were reported exploited in the wild during 2026.","quote":"Throughout 2026, 12 distinct Langflow CVEs have been exploited in the wild, including 11 new vulnerabilities and one identified prior to the start of the year.","source_index":0,"grade":"C"},{"step":"caught","text":"VulnCheck telemetry recorded over 50 Canary detections on 30 August 2026.","quote":"On August 30, 2026, the firm recorded over 50 Canary detections within hours.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://forkast.news/langflows-12th-exploited-cve-of-2026-fuels-sustained-credential-harvesting-campaign/"]},"analysis":{"sections":{"timeline":[{"text":"The flaw CVE-2026-0768 was initially disclosed as a zero-day by the Zero Day Initiative.","quote":"This activity centers on CVE-2026-0768, a CVSS 9.8 unauthenticated remote code execution (RCE) flaw in the platform’s code validator, initially disclosed as a zero-day by the Zero Day Initiative (ZDI) on January 9, 2026.","source_index":0,"when":"2026-01-09"},{"text":"Twelve distinct Langflow CVEs were exploited in the wild during 2026.","quote":"Throughout 2026, 12 distinct Langflow CVEs have been exploited in the wild, including 11 new vulnerabilities and one identified prior to the start of the year.","source_index":0,"when":"2026"},{"text":"VulnCheck recorded over 50 Canary detections.","quote":"On August 30, 2026, the firm recorded over 50 Canary detections within hours.","source_index":0,"when":"2026-08-30"},{"text":"The cumulative detection count rose to more than 360.","quote":"By September 1, 2026, that figure climbed to more than 360 cumulative detections.","source_index":0,"when":"2026-09-01"}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://forkast.news/langflows-12th-exploited-cve-of-2026-fuels-sustained-credential-harvesting-campaign/"]}}