Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCE
A high-severity path traversal vulnerability in Langflow, designated CVE-2026-5027 (CVSS 8.8), is being actively exploited in the wild. Discovered by Tenable, the…
Tag: Open Source
Langflow: Open-Source AI Application Development Platform
Langflow is an open-source AI application development platform that has been targeted by multiple RCE vulnerabilities.
OpenClaw: Open-Source Autonomous Assistant
OpenClaw, formerly Clawdbot and Moltbot, is an open-source autonomous assistant used in mind virus experiments. Its default soul file was exploited in…
PostgreSQL: Open-Source Relational Database
PostgreSQL is used by Splunk Enterprise as a sidecar service. The vulnerability CVE-2026-20253 exploits the PostgreSQL sidecar endpoint to achieve unauthenticated file…
Mastra: Open-Source AI Framework Hit by Supply Chain Attack
Mastra is an open-source JavaScript and TypeScript framework for building AI applications. In June 2026, 145 of its npm packages were compromised…
145 Mastra npm Packages Compromised in Supply Chain Attack, Crypto-Stealer Deployed
On June 17, 2026, a software supply chain attack codenamed 'easy-day-js' compromised 145 npm packages under the @mastra/* namespace, a popular open-source…
PostgreSQL Database
PostgreSQL is an advanced open-source relational database. 16% of organizations expose Postgres to the internet, making it a common attack vector.
RustDesk: Open-Source Remote Desktop Software
RustDesk is an open-source remote desktop software used by Armored Likho to capture victim credentials.
RustDesk: Open-Source Remote Desktop Software Exploited by Armored Likho
RustDesk is an open-source remote desktop software that Armored Likho installs on compromised machines. The stealer prompts victims to enter credentials, then…
NGINX Open Source Patched for Critical RCE Flaws
NGINX Open Source versions 1.31.0-1.31.1 are vulnerable to two critical remote code execution flaws; fixed in 1.31.2.