Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

A critical Remote Code Execution (RCE) vulnerability in Langflow, version prior to 1.9.0, has been actively exploited by threat actors. Attackers are leveraging a crafted HTTP POST request to add malicious MCP servers, leading to command execution and potential server compromise. Data indicates attackers are attempting to extract environment variables and use Docker commands to access the host filesystem.