CISA orders feds to prioritize patching Langflow auth bypass flaw

CISA has ordered federal agencies to patch an actively exploited IDOR vulnerability in the Langflow AI framework (CVE-2026-55255) after in-the-wild observations of exploitation for code execution and second-stage implant delivery; other Langflow flaws have also been used by ransomware operators and to write arbitrary files, prompting inclusion in the Known Exploited Vulnerabilities catalog and urgent remediation guidance.