{"cve_id":"CVE-2026-5027","title":"Langflow <= 1.8.4 - Path Traversal to RCE via File Upload","severity":"high","actively_exploited":false,"patterns":["/api/v1/login","/api/v2/files","/api/v1/auto_login"],"events":479,"unique_ips":40,"actors":[{"ip":"172.245.21.30","events":90,"country_code":"US","country":"United States","org":"HostPapa","rdns":"172-245-21-30-host.colocrossing.com","scanner_tag":null},{"ip":"34.145.99.73","events":28,"country_code":"US","country":"United States","org":"Google LLC","rdns":"73.99.145.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"185.242.3.5","events":18,"country_code":"NL","country":"Netherlands","org":"Netiface Limited","rdns":"","scanner_tag":null},{"ip":"34.131.191.159","events":14,"country_code":"IN","country":"India","org":"Google LLC","rdns":"159.191.131.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.32.98.232","events":14,"country_code":"DE","country":"Germany","org":"Google LLC","rdns":"232.98.32.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.21.154.212","events":14,"country_code":"SG","country":"Singapore","org":"Google LLC","rdns":"212.154.21.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.100.199.1","events":14,"country_code":"IN","country":"India","org":"Google LLC","rdns":"1.199.100.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.162.180.107","events":14,"country_code":"US","country":"United States","org":"Google LLC","rdns":"107.180.162.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.14.215.57","events":14,"country_code":"IN","country":"India","org":"Google LLC","rdns":"57.215.14.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"35.240.178.56","events":14,"country_code":"SG","country":"Singapore","org":"Google LLC","rdns":"56.178.240.35.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.21.208.191","events":14,"country_code":"SG","country":"Singapore","org":"Google LLC","rdns":"191.208.21.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.93.154.77","events":14,"country_code":"IN","country":"India","org":"Google LLC","rdns":"77.154.93.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.65.98.115","events":14,"country_code":"CH","country":"Switzerland","org":"Google LLC","rdns":"115.98.65.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.40.152.103","events":14,"country_code":"AU","country":"Australia","org":"Google LLC","rdns":"103.152.40.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.17.165.5","events":14,"country_code":"IT","country":"Italy","org":"Google LLC","rdns":"5.165.17.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.131.119.251","events":14,"country_code":"IN","country":"India","org":"Google LLC","rdns":"251.119.131.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"194.110.87.216","events":14,"country_code":"BG","country":"Bulgaria","org":"DA International Group Ltd.","rdns":"","scanner_tag":null},{"ip":"34.172.164.119","events":14,"country_code":"US","country":"United States","org":"Google LLC","rdns":"119.164.172.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.21.152.217","events":14,"country_code":"SG","country":"Singapore","org":"Google LLC","rdns":"217.152.21.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.18.217.21","events":14,"country_code":"QA","country":"Qatar","org":"Google LLC","rdns":"21.217.18.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.93.24.84","events":14,"country_code":"IN","country":"India","org":"Google LLC","rdns":"84.24.93.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"35.234.81.66","events":14,"country_code":"DE","country":"Germany","org":"Google LLC","rdns":"66.81.234.35.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.158.194.225","events":14,"country_code":"KR","country":"South Korea","org":"Google LLC","rdns":"225.194.158.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.6.123.140","events":14,"country_code":"NL","country":"Netherlands","org":"Google LLC","rdns":"140.123.6.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.130.62.231","events":14,"country_code":"CA","country":"Canada","org":"Google LLC","rdns":"231.62.130.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"185.242.3.82","events":10,"country_code":"NL","country":"The Netherlands","org":"Netiface America, Inc.","rdns":"","scanner_tag":null},{"ip":"54.161.68.68","events":6,"country_code":"US","country":"United States","org":"Amazon.com, Inc.","rdns":"ec2-54-161-68-68.compute-1.amazonaws.com","scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"}},{"ip":"45.225.135.18","events":4,"country_code":"PA","country":"Panama","org":"RACK SPHERE HOSTING S.A.","rdns":"","scanner_tag":null},{"ip":"146.70.119.22","events":2,"country_code":"GB","country":"United Kingdom","org":"M247 Europe SRL","rdns":"","scanner_tag":null},{"ip":"87.121.84.167","events":2,"country_code":"US","country":"United States","org":"TechTies Inc.","rdns":"","scanner_tag":null},{"ip":"103.124.165.237","events":2,"country_code":"AL","country":"Albania","org":"Keminet SHPK","rdns":"","scanner_tag":null},{"ip":"101.36.125.58","events":1,"country_code":"HK","country":"Hong Kong","org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","rdns":"","scanner_tag":null},{"ip":"176.65.149.213","events":1,"country_code":"NL","country":"Netherlands","org":"Pfcloud UG (haftungsbeschrankt)","rdns":"176.65.149.213.ptr.pfcloud.network","scanner_tag":null},{"ip":"194.110.115.54","events":1,"country_code":"BE","country":"Belgium","org":"M247 Europe SRL","rdns":"","scanner_tag":null},{"ip":"185.209.196.179","events":1,"country_code":"DE","country":"Germany","org":"31173 Services AB","rdns":"","scanner_tag":null},{"ip":"45.198.224.81","events":1,"country_code":"SE","country":"Sweden","org":"","rdns":"","scanner_tag":null},{"ip":"185.77.218.6","events":1,"country_code":"US","country":"United States","org":"Oy Crea Nova Hosting Solution Ltd","rdns":"","scanner_tag":null},{"ip":"185.242.3.238","events":1,"country_code":"NL","country":"The Netherlands","org":"Netiface America, Inc.","rdns":"","scanner_tag":null},{"ip":"193.32.127.246","events":1,"country_code":"CH","country":"Switzerland","org":"31173 Services AB","rdns":"","scanner_tag":null},{"ip":"103.168.67.159","events":1,"country_code":"US","country":"United States","org":"DIGI VPS","rdns":"159.67.168.103.in-addr.arpa.digivps.com","scanner_tag":null}],"top_asns":[{"asn":396982,"org":"Google LLC","events":322,"ips":22},{"asn":36352,"org":"HostPapa","events":90,"ips":1},{"asn":401626,"org":"Netiface America, Inc.","events":23,"ips":3},{"asn":203380,"org":"DA International Group Ltd.","events":14,"ips":1},{"asn":14618,"org":"Amazon.com, Inc.","events":6,"ips":1},{"asn":60223,"org":"Netiface Limited","events":6,"ips":1},{"asn":64107,"org":"RACK SPHERE HOSTING S.A.","events":4,"ips":1},{"asn":9009,"org":"M247 Europe SRL","events":3,"ips":2},{"asn":197706,"org":"Keminet SHPK","events":2,"ips":1},{"asn":39351,"org":"31173 Services AB","events":2,"ips":2}],"fingerprints":{"ja4h":["ge11nn0400_88d30a62b7ad","po11nn16en_95ea7cb0e7ee","ge11nn0300_0db47b7d240d","po11nn0500_b4ba55311b46","ge11nn0400_17292dadbc7b","ge11nn0500_e161b8ad0830"],"ja4":["t13i1515h2_8daaf6152771_e5627efa2ab1","t13i1313h2_f57a46bbacb6_fb48f8b98a29","t13i1314h2_f57a46bbacb6_3b244d8fbcc8","t13i3111h1_e8f1e7e78f70_d41ae481755e","t13i1515h2_8daaf6152771_02713d6af862"]},"sample_paths":["/api/v2/files.rar","/api/v2/files.tar.gz","/api/v2/files.tgz","/api/v2/files.tar","/api/v2/files.tar.bz2","/api/v2/files.zip","/api/v2/files.tar.xz","/api/v1/auto_login","/api/v2/files.gz","/api/v2/files.7z"],"timeline":[{"day":"2026-05-11","events":1,"ips":1},{"day":"2026-05-15","events":1,"ips":1},{"day":"2026-05-16","events":1,"ips":1},{"day":"2026-05-25","events":1,"ips":1},{"day":"2026-05-29","events":3,"ips":3},{"day":"2026-06-14","events":154,"ips":10},{"day":"2026-06-15","events":70,"ips":5},{"day":"2026-06-18","events":6,"ips":1},{"day":"2026-06-20","events":4,"ips":2},{"day":"2026-06-21","events":4,"ips":1},{"day":"2026-06-22","events":4,"ips":1},{"day":"2026-06-25","events":58,"ips":5},{"day":"2026-06-26","events":2,"ips":2},{"day":"2026-06-29","events":12,"ips":1},{"day":"2026-06-30","events":66,"ips":4},{"day":"2026-07-01","events":25,"ips":1},{"day":"2026-07-02","events":24,"ips":2},{"day":"2026-07-03","events":6,"ips":1},{"day":"2026-07-05","events":4,"ips":1},{"day":"2026-07-06","events":8,"ips":1},{"day":"2026-07-11","events":4,"ips":1},{"day":"2026-07-13","events":6,"ips":1},{"day":"2026-07-15","events":12,"ips":1},{"day":"2026-07-16","events":2,"ips":1},{"day":"2026-07-27","events":1,"ips":1}],"window_hours":2160}