NewsThe Hacker News
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Affected vendors and products
More on Endpoints
Other advisories
- Not ratedosv:CLEANSTART-2024-RV23757earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation
- Not ratedosv:CLEANSTART-2026-UE90622@octokit/endpoint turns REST API endpoints into generic request options
- Not ratedosv:CVE-2026-119659Blossom through 1.17.1 Authorization Bypass via Folder Endpoints
- Not ratedosv:CVE-2026-119644Blossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpoints
- Not ratedosv:CLEANSTART-2026-WO74839WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request
- Not ratedosv:CLEANSTART-2026-JY64483One of the usage insights HTTP API endpoints in Grafana Enterprise 6
- Not ratedosv:CVE-2026-65874Apache Fineract: SQL injection via ORDER BY parameters in the Center and datatables endpoints
- MediumCVE-2026-115886MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
Other news entries
- GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHubNewsDark Reading
- Fabric API Authentication bypassNewsFortinet PSIRT
- NCSC-2026-0412 [1.00] [M/H] Kwetsbaarheden verholpen in Splunk EnterpriseNewsNCSC-NL
- Cisco License (Smart Software Manager) On-Prem VulnerabilitiesNewsCisco PSIRT
- Reducing shadow IT visibility gaps with WazuhNewsBleepingComputer
- NCSC-2026-0340 [1.00] [M/H] Kwetsbaarheden verholpen in Aruba Networks ArubaOS-CXNewsNCSC-NL
- Securing Claude Code: The New Compliance API, Local Visibility, and Identity GovernanceNewsThe Hacker News
- AI Speeds Up Malware Development, Not Its Success Rate: AnalysisNewsSecurityWeek
Source: https://thehackernews.com/2026/06/langflow-rce-exploited-to-deploy-monero.html
ID