Hackers are exploiting CVE-2026-5027, a high-severity path traversal issue in Langflow, for remote code execution.
CVE-2026-5027 lets attackers abuse Langflow path traversal, exposing 7,000 AI app instances to file-write attacks.
FROST uses JavaScript and OPFS SSD timing to identify websites at 88.95% F1, exposing cross-browser privacy leaks.