TLDR Tech / InfoSec
7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes
Attackers are chaining three classic bugs in LangGraph, Langflow, and LangChain-core to reach code execution and steal secrets from AI agent infrastructure. LangGraph's SQLite checkpointer can be poisoned to run arbitrary Python, Langflow's file upload bug is already delivering cron-based shells on ~7,000 exposed servers, and LangChain-core's prompt loader can read API keys from disk unless teams patch specific versions and lock down defaults.
Read the full story