{"id":2624,"date":"2026-09-01T08:42:10","date_gmt":"2026-09-01T08:42:10","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=2624"},"modified":"2026-09-01T08:42:10","modified_gmt":"2026-09-01T08:42:10","slug":"attackers-exploit-critical-langflow-and-rails-flaws-in-credential-probing-and-c2-activity","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=2624","title":{"rendered":"Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity"},"content":{"rendered":"<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">Sep 01, 2026<\/span><\/span><span class=\"p-tags\">Vulnerability \/ Artificial Intelligence<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj9_EygYWh8fZRphLL1V9dg-h1jgQ0f9xmlVuPwPAaaEUUCBkKbQ4nTaL27WIevCJg42GWtDGMKyRvzBUz9MWtD2FxPx7vCKwXLirO-N1YRcpPy0mX_B_fTG2gBS-JPRJGXfCh_I2yHJgoi1V5lve7Opcm-M0ApWs6gohPjNhBi-0CsP49guHlM2lzHLsiD\/s1700-nu-rw-lo-l85-e365\/lang.jpg\" style=\"display: block;  text-align: center; clear: left; float: left;\"><\/a><\/div>\n<p>Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck.<\/p>\n<p>The vulnerabilities in question are listed below &#8211;<\/p>\n<ul>\n<li><strong><a href=\"https:\/\/www.zerodayinitiative.com\/advisories\/ZDI-26-034\" target=\"_blank\">CVE-2026-0768<\/a><\/strong> (CVSS score: 9.8) &#8211; A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user.<\/li>\n<li><strong>CVE-2026-66066<\/strong> aka KindaRails2Shell (CVSS score: 9.5) &#8211; A vulnerability that could allow an unauthenticated attacker to read arbitrary files from the server, leak Rails process environment and secrets such as secret_key_base, the Rails master key, database passwords, cloud storage credentials, and API tokens, ultimately leading to remote code execution.<\/li>\n<\/ul>\n<p>Attackers can exploit CVE-2026-66066 by uploading a crafted image by taking advantage of the discrepancy between Active Storage and libvips in how they read input files. Successful exploitation requires affected applications to use libvips for Active Storage image processing and accept image uploads from untrusted users.<\/p>\n<div class=\"dog_two clear\">\n<div class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/trust-world-update-d\" rel=\"nofollow noopener sponsored\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhYq3TvePXpW0JIC7fXyv7A1W8KQqmb-AZqza2EuPyT0k8Nm5CwHYHISFLKXSKIAyR8JRtqEFQ4zx5jADiAkZKQ08nRWG1jCRV5YAbhKua7WaDdH1L6wsI-xOkoV4brlMfK44UwU-4Q1xqWg0uNN7sZkMCzci4RXYgWMNPHTtuKua7OR4oCbmxE10u0yKnR\/s728-nu-rw-lo-l85-e365\/tl-d.jpg\" width=\"729\" height=\"91\"\/><\/a><\/div>\n<\/div>\n<p>VulnCheck said it recorded more than 50 detections within a few hours on August 30, 2026, a figure that has since risen to 360 as of Monday.<\/p>\n<p>\u00abAdversaries appear to be conducting a mix of reconnaissance and credential harvesting activities: Among other things, attacker requests are querying environment variables (LANGFLOW_SUPERUSER, OPENAI_API*, AWS_ACCESS*, AWS_SECRET*), reading \/root\/.cache\/langflow\/secret_key, and checking .ssh access and .bash_history size,\u00bb Caitlin Condon, vice president of threat research at VulnCheck, <a href=\"https:\/\/www.linkedin.com\/feed\/update\/urn:li:activity:7499493657218076672\/\" target=\"_blank\">said<\/a>.<\/p>\n<p><a name=\"more\"\/><\/p>\n<p>\u00abSource traffic primarily originates from Russia and has thus far exclusively hit Canaries in the U.K.\u00bb<\/p>\n<p>The exploitation comes as threat actors have <a href=\"https:\/\/www.vulncheck.com\/blog\/pwning-the-ai-stack\" target=\"_blank\">exploited<\/a> as many as 12 vulnerabilities since 2025, with more than 15,000 successful attempts leveraging <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-0769\" target=\"_blank\">CVE-2026-0769<\/a>, <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-3248\" target=\"_blank\">CVE-2025-3248<\/a>, and <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2026-5027\" target=\"_blank\">CVE-2026-5027<\/a>. The majority of the vulnerable Langflow hosts are located in the U.S., Germany, Malaysia, Brazil, and India.<\/p>\n<p>In one case observed against its canary systems, unknown threat actors have been observed exploiting CVE-2026-5027 to drop a Python credential harvester, proxy agents, and SimpleHelp for remote access. In another, attackers have weaponized CVE-2025-3248 to enlist the machine into an XMR cryptocurrency miner botnet.<\/p>\n<p>\u00abThey then disabled auditd, resulting in a forensic blind spot, and exploited CVE-2026-0769 to drop .sysd,\u00bb VulnCheck said. \u00abFrom there, the attacker pivoted to scan for other targets, likely to expand their cryptomining operation, and moved on to another host.\u00bb<\/p>\n<p>The findings highlight increased threat actor interest in AI development platforms, which can provide access to sensitive credentials, cloud environments, and other connected systems.<\/p>\n<div class=\"dog_two clear\">\n<div class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/event-security-need\" rel=\"nofollow noopener sponsored\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhJkE4t8oCql1wmWVt687J1yD7WnYRqvIpcsUwFSVUO-0HpxZWMCxLmeYwBlz38-C0KD-R6f9Pg0swgPTQuBsNXck_Kl3iKWNSQtyMcDNUSZGhiBd_XFu6U1SQi5LhuW-FHg00iT3CbRCUgMoCwhZevwxp8-9gwM2wZVVtGVO8Z2NbZ5EjVmI2dH4adnSAk\/s728-nu-rw-lo-l85-e365\/Shai-Hulud-d.jpg\" width=\"729\" height=\"91\"\/><\/a><\/div>\n<\/div>\n<p>The threat intelligence company has since also <a href=\"https:\/\/www.linkedin.com\/feed\/update\/urn:li:activity:7497979391268892672\/\" target=\"_blank\">detected<\/a> active exploitation of CVE-2026-66066 targeting its canaries in Singapore, Israel, and the U.K. In a post shared on LinkedIn, security researcher Patrick Garrity said the activity originates from a single IP address in France and establishes command-and-control (C2) to a host in Israel.<\/p>\n<p>\u00abActive Storage always enables the libvips loaders that are unsafe for untrusted content, so any app that renders image-upload variants with the default vips processor can be coerced into loading a malicious upload,\u00bb VulnCheck <a href=\"https:\/\/docs.vulncheck.com\/initial-access\/2026-08-07#cve-2026-66066-ruby-on-rails-active-storage-libvips-untrusted-file-read-to-rce-kindarails2shell\" target=\"_blank\">added<\/a>. \u00abNotably, we tested a patched 8.1.3.1 server and found that while the fix blocks the libvips file read, it does not neutralize the variation-key Marshal deserialization: the RCE gadget still executes on a patched server given a valid signature.\u00bb<\/p>\n<p>As of early August, more than 7,100 exposed vulnerable instances of Ruby on Rails were identified by VulnCheck.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\ue804Ravie Lakshmanan\ue802Sep 01, 2026Vulnerability \/ Artificial Intelligence Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. The vulnerabilities in question&hellip;<\/p>\n","protected":false},"author":1,"featured_media":2625,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[2513,622,3250,58,120,11,796,2801],"class_list":["post-2624","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-activity","tag-attackers","tag-credentialprobing","tag-critical","tag-exploit","tag-flaws","tag-langflow","tag-rails"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/2624","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2624"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/2624\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/2625"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2624"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2624"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2624"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}