Wednesday, September 2, 2026 · 2 of 5

1. A critical Langflow RCE (CVE-2026-0768, CVSS 9.8) is under continuous active exploitation since Aug 29

   With attackers harvesting OpenAI and AWS keys from .env files and environment variables (Sep 1–2)

   Security