Langflow on Myles Nieman — Bloghttps://blog.msnieman.com/tags/langflow/Recent content in Langflow on Myles Nieman — BlogHugoen-usThu, 02 Apr 2026 00:00:00 +0000TemplTraphttps://blog.msnieman.com/writeups/templtrap/Thu, 02 Apr 2026 00:00:00 +0000https://blog.msnieman.com/writeups/templtrap/A Langflow AI server exposed on port 80 is exploited via CVE-2026-0770 (SSTI RCE) for an initial shell as karen; screen 5.0.0 setuid-root logging (CVE-2025-23395) is then abused to symlink /etc/sudoers and grant passwordless sudo.