THREAT INTELLIGENCE LEAD
CISA Flags Three More Exploited Flaws, Including an AI Tool Attackers Love
CISA added three exploited vulnerabilities to its watch list today: a maximum-severity flaw in Langflow, an open-source AI development platform, plus flaws in Apache Tomcat and N-able N-central. The Langflow bug, CVE-2026-9198, lets an attacker with no login take full control of a default install, and has already been used to plant cryptocurrency miners. If your firm or any vendor has experimented with Langflow, treat it as a live risk.
Get every edition free: subscribe to Frederick Weekly.