{"metadata": {"vulnerability": "CVE-2026-105740", "count": 26, "kinds": {"milestone": 3, "sighting": 12, "kev": 5, "other": 6}}, "data": [{"timestamp": "2026-10-05T19:11:07.946Z", "date_only": false, "value": "2026-10-05T19:11:07.946Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-105740", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-05T20:46:18.854Z", "date_only": false, "value": "2026-10-05T20:46:18.854Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-105740", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-05T20:46:18.854Z", "date_only": false, "value": "2026-10-05T20:46:18.854Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-105740", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-05T21:16:35.567Z", "date_only": false, "value": "2026-10-05T21:16:35.567", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105740", "record": "FKIE_CVE-2026-105740", "field": "published"}, {"timestamp": "2026-10-05T21:31:48.273Z", "date_only": false, "value": "2026-10-05T21:31:48.273920Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx5uhyymnk2b", "record": "CVE-2026-105740", "field": "creation_timestamp", "uuid": "772a132b-40e1-4f91-800a-dbe8f19d0500", "content": "\ud83d\udd34 CVE-2026-105740 - Critical (9.9)\n\nLangflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105740/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx5uhyymnk2b"}, {"timestamp": "2026-10-05T22:08:04.730Z", "date_only": false, "value": "2026-10-05T22:08:04.730677Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx5witw7v52o", "record": "CVE-2026-105740", "field": "creation_timestamp", "uuid": "1cbcb220-434b-4939-8b9a-cdf363e70a56", "content": "\ud83d\udea8 CVE-2026-105740 \u2014 CVSS 9.9 CRITICAL\n\nLangflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105740\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mx5witw7v52o"}, {"timestamp": "2026-10-06T02:28:15Z", "date_only": false, "value": "2026-10-06T02:28:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/langflow-disponibili-poc-per-lo-sfruttamento-di-4-vulnerabilita", "record": "CVE-2026-105740", "field": "creation_timestamp", "uuid": "413a5675-bbb3-4756-ad3a-c56612b9ae68", "url": "https://www.acn.gov.it/portale/w/langflow-disponibili-poc-per-lo-sfruttamento-di-4-vulnerabilita"}, {"timestamp": "2026-10-06T18:20:20.481Z", "date_only": false, "value": "2026-10-06T18:20:20.481095Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105740", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-06T18:20:20.481Z", "date_only": false, "value": "2026-10-06T18:20:20.481095Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105740", "record": "FKIE_CVE-2026-105740", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-06T18:20:28.495Z", "date_only": false, "value": "2026-10-06T18:20:28.495Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-105740", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-06T18:20:28.495Z", "date_only": false, "value": "2026-10-06T18:20:28.495Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105740", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-06T19:17:41.197Z", "date_only": false, "value": "2026-10-06T19:17:41.197", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105740", "record": "FKIE_CVE-2026-105740", "field": "lastModified"}, {"timestamp": "2026-10-07T17:30:10.500Z", "date_only": false, "value": "2026-10-07T17:30:10.500560Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxchvrvaas2o", "record": "CVE-2026-105740", "field": "creation_timestamp", "uuid": "245a58ef-7a91-437f-af77-29556837e7c4", "content": "CVE-2026-105740 - langflow\nVersions of Langflow before 1.9.0 allow anyone with a valid account to add a special MCP connection that runs whatever text they enter as a system command. This can give the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflow #langflowai #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxchvrvaas2o"}, {"timestamp": "2026-10-11T17:42:21Z", "date_only": false, "value": "2026-10-11T17:42:21+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-105740", "field": "timestamps.asserted_at", "uuid": "a8d43d47-e76e-447b-9670-e0782948e8a8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-11T17:42:21Z", "date_only": false, "value": "2026-10-11T17:42:21+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-105740", "field": "timestamps.first_seen_at", "uuid": "a8d43d47-e76e-447b-9670-e0782948e8a8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-11T17:42:21Z", "date_only": false, "value": "2026-10-11T17:42:21+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-105740", "field": "status.status_updated_at", "uuid": "a8d43d47-e76e-447b-9670-e0782948e8a8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-11T17:42:21.104Z", "date_only": false, "value": "2026-10-11T17:42:21.104Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-105740", "field": "evidence.0.details.added_date", "uuid": "a8d43d47-e76e-447b-9670-e0782948e8a8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T18:00:01Z", "date_only": false, "value": "2026-10-12T18:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-105740", "field": "timestamps.recorded_at", "uuid": "a8d43d47-e76e-447b-9670-e0782948e8a8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T18:00:43.807Z", "date_only": false, "value": "2026-10-12T18:00:43.807573Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a8d43d47-e76e-447b-9670-e0782948e8a8", "record": "CVE-2026-105740", "field": "creation_timestamp", "uuid": "00ba14b2-a91d-4e2a-afb9-c62a3795f908", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a8d43d47-e76e-447b-9670-e0782948e8a8"}, {"timestamp": "2026-10-15T09:10:36.456Z", "date_only": false, "value": "2026-10-15T09:10:36.456892Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxvppui43t2e", "record": "CVE-2026-105740", "field": "creation_timestamp", "uuid": "8d3d1c25-1387-4c02-ac1f-bec1fa6b3b09", "content": "\ud83e\udd16 CVE-2026-105740 (CVSS 9.9): authenticated RCE in Langflow, the open-source AI/agentic workflow builder. 1,423 exploitation attempts logged across honeypots since disclosure.\nhttps://thehackernews.com/2026/10/langflows-critical-authenticated-rce.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxvppui43t2e"}, {"timestamp": "2026-10-15T11:19:18.899Z", "date_only": false, "value": "2026-10-15T11:19:18.899204Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxvwvyiosb2d", "record": "CVE-2026-105740", "field": "creation_timestamp", "uuid": "44559732-1444-4464-8b46-dc3f652d07b2", "content": "Langflow\u306e\u8a8d\u8a3c\u3055\u308c\u305fRCE\u8106\u5f31\u6027\uff08CVE-2026-105740\uff09\u304c\u30011423\u4ef6\u306e\u30cf\u30cb\u30fc\u30dd\u30c3\u30c8\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mxvwvyiosb2d"}, {"timestamp": "2026-10-15T12:36:24.322Z", "date_only": false, "value": "2026-10-15T12:36:24.322307Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxw37ttmmn2n", "record": "CVE-2026-105740", "field": "creation_timestamp", "uuid": "58b04d2f-89f8-423c-bb78-29e0464869ab", "content": "Previdian recorded 1,423 attempts to exploit Langflow\u2019s authenticated RCE flaw, CVE-2026-105740, in honeypot sensors since September 19. The flaw affects versions before 1.9.0 and can let authenticated users run OS commands.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxw37ttmmn2n"}, {"timestamp": "2026-10-15T13:18:47.121Z", "date_only": false, "value": "2026-10-15T13:18:47.121757Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cloud/statuses/117444144401511092", "record": "CVE-2026-105740", "field": "creation_timestamp", "uuid": "9b48f3f0-f78f-4dd6-81b1-f06eb5251272", "content": "\ud83e\udd16 CVE-2026-105740 (CVSS 9.9): authenticated RCE in Langflow, the open-source AI/agentic workflow builder. 1,423 exploitation attempts logged across honeypots since disclosure. Patches available, but exposed instances stay reachable.\ud83d\udd17 https://thehackernews.com/2026/10/langflows-critical-authenticated-rce.html#CVE #RCE #CyberSec #AI", "url": "https://infosec.exchange/users/cloud/statuses/117444144401511092"}, {"timestamp": "2026-10-15T13:18:57.812Z", "date_only": false, "value": "2026-10-15T13:18:57.812807Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117064736050780246/statuses/117444470918510748", "record": "cve-2026-105740", "field": "creation_timestamp", "uuid": "8a750c58-1eeb-4d6b-b040-ccffc72149b9", "content": "Previdian honeypots show accelerating attempts to exploit Langflow CVE-2026-105740, an authenticated RCE rated CVSS 9.9. Internet-exposed AI workflow servers risk full takeover if unpatched. #Langflow #RemoteCodeExecution #ThreatIntel\nhttps://cyberworldops.eu/en/attackers-target-langflow-rce-cve-2026-105740-as-honeypot-activity", "url": "https://infosec.exchange/ap/users/117064736050780246/statuses/117444470918510748"}, {"timestamp": "2026-10-16T09:03:31.254Z", "date_only": false, "value": "2026-10-16T09:03:31.254457Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117449779500834198", "record": "CVE-2026-105740", "field": "creation_timestamp", "uuid": "8d37a0c8-714c-4de3-b114-362ba105e9b9", "content": "Langflow\u2019s Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts\nThreat actors are exploiting a critical security flaw in Langflow, the open-source platform for building AI applications and agentic workflows, according to an alert from Previdian reported by The Hacker News. The vulnerability, CVE-2026-105740 with a CVSS score of 9.9, was targeted in 1,423 honeypot exploit attempts. https://thehackernews.com/2026/10/langflows-critical-authenticated-rce.html", "url": "https://infosec.exchange/users/edwardk/statuses/117449779500834198"}, {"timestamp": "2026-10-16T15:44:08.129Z", "date_only": false, "value": "2026-10-16T15:44:08.129063Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxyw6hxjae2u", "record": "CVE-2026-105740", "field": "creation_timestamp", "uuid": "5aaedd83-0ef6-43f3-92e8-33e5a4371d65", "content": "Langflow CVE-2026-105740, CVSS 9.9, authenticated RCE is being actively probed \u2014 1,423 honeypot exploit attempts already logged. Patch now; affected/fixed versions aren't stated yet, so verify your build. https://cti.securitycyber.uk", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxyw6hxjae2u"}]}