腾讯网

AI开发工具Langflow高危漏洞遭活跃利用，可导致服务器任意代码执行

美国网络安全和基础设施安全局（CISA）证实，AI代理开发工具Langflow上月修复的一个高危漏洞（CVE-2025-3248）正在被广泛利用。该漏洞允许未授权用户通过未受保护的API端点在服务器上执行任意Python代码，已被列入CISA已知被利用漏洞（KEV）目录，政府机构和私营 ...
Dark Reading

Hackers Exploit Critical Langflow Flaw to Unleash Flodrix Botnet

Attackers are actively targeting a critical flaw in a popular Python-based Web app for building AI agents and workflows to unleash a powerful botnet that can cause full system compromise, distributed ...
Dark Reading

'Easily Exploitable' Langflow Vulnerability Requires Immediate Patching

A critical flaw found in the open source Langflow platform was added to the US Cybersecurity and Infrastructure Security Agency’s (CISA's) Known Exploited Vulnerabilities (KEV) catalog. Langflow is a ...
CSOonline

Critical flaw in AI agent dev tool Langflow under active exploitation

Researchers from security firm Trend Micro warn that a critical remote code execution vulnerability patched in April in the Langflow AI agent framework is being exploited to deploy botnet malware. The ...
腾讯网

从工程视角看 Langflow：一站式 AI Agent 工作流解决方案解析

Hello folks，我是 Luga，今天我们来聊一下人工智能应用场景 - 构建高效、灵活的计算架构的 AI Agents 低代码平台 - Langflow。 众所周知，随着技术不断的迭代，构建复杂的 AI 应用，特别是需要整合各种外部服务（API）、不同模型和多样化数据源（数据库 ...