sign in--:--:--UTC

CVE-2026-55255

exploited in the wild☆ pin

CVSS

6.1

Reports

8

First seen

Jun 29, 2026

Last seen

Sep 1, 2026

Affected product

Langflow

Associated actors

JADEPUFFER ×2 FulcrumSec ×1 Lone operator (45.207.216.55) ×1 ShinyHunters ×1 Turla ×1 World Leaks ×1

Recent reports

Critical Langflow RCE vulnerability (CVE-2026-0768) actively exploited to steal API keys and credentials

Bleeping ComputerSep 1, 2026 Critical

CISA Orders Urgent Patching of Actively Exploited Langflow RCE Flaw CVE-2026-0770

Bleeping ComputerJul 22, 2026 High

JADEPUFFER Deploys ENCFORGE Ransomware Targeting AI Model Files via Langflow RCE

The Hacker NewsJul 21, 2026 High

Langflow Security Advisory – CVE-2026-55255 Added to CISA KEV

Canadian Centre AlertsJul 8, 2026 High

CISA orders federal agencies to patch actively exploited Langflow authentication bypass

Bleeping ComputerJul 8, 2026 Critical

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog

The Hacker NewsJul 8, 2026 High

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesJul 7, 2026 High

Threat Intelligence Report – 29 June: Breaches, AI Threats, and Active Exploits

Check Point ResearchJun 29, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans