NewsThe Hacker News
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Affected vendors and products
More on Endpoints
Other advisories
- Not ratedosv:CVE-2026-121631Lightdash 0.2609.0 before 3.137.0 Cross-Project IDOR via RenameService Dashboard Endpoints
- Not ratedosv:CVE-2026-121587Coolify before 4.1.1 Application Name Enumeration via Manual Webhook Endpoints
- Not ratedosv:CVE-2026-121556FastBee through 2.1.0 IDOR via /iot/product By-ID Endpoints
- Not ratedosv:CVE-2026-121430AzuraCast before 0.24.0 Missing Authorization via Station Waveform Endpoints
- Not ratedosv:CLEANSTART-2024-RV23757earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation
- Not ratedosv:CLEANSTART-2026-UE90622@octokit/endpoint turns REST API endpoints into generic request options
- Not ratedosv:CVE-2026-119659Blossom through 1.17.1 Authorization Bypass via Folder Endpoints
- Not ratedosv:CVE-2026-119644Blossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpoints
Other news entries
- GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHubNewsDark Reading
- CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildNewsRapid7
- Fabric API Authentication bypassNewsFortinet PSIRT
- NCSC-2026-0412 [1.00] [M/H] Kwetsbaarheden verholpen in Splunk EnterpriseNewsNCSC-NL
- Cisco License (Smart Software Manager) On-Prem VulnerabilitiesNewsCisco PSIRT
- Reducing shadow IT visibility gaps with WazuhNewsBleepingComputer
- NCSC-2026-0340 [1.00] [M/H] Kwetsbaarheden verholpen in Aruba Networks ArubaOS-CXNewsNCSC-NL
- Securing Claude Code: The New Compliance API, Local Visibility, and Identity GovernanceNewsThe Hacker News
Source: https://thehackernews.com/2026/06/langflow-rce-exploited-to-deploy-monero.html
ID