**Source : The Hacker News | 10 juin 2026**

A high-severity unpatched security flaw in Langflow, an open-source low-code platform to build artificial intelligence (AI) applications, has come under active exploitation in the wild, according to findings from VulnCheck.

The vulnerability in question is CVE-2026-5027 (CVSS score: 8.8), a case of path traversal that could allow an attacker to write files to arbitrary locations.

"The 'POST /

👉 **Lire l'article complet sur The Hacker News :** [https://thehackernews.com/2026/06/unpatched-langflow-flaw-cve-2026-5027.html](https://thehackernews.com/2026/06/unpatched-langflow-flaw-cve-2026-5027.html)