---
title: "Security digest: August 4, 2026"
url: https://erroneo.us/security/2026-08-04/
description: "August 4, 2026 vulnerability digest: 3 briefs (Langflow CVE-2026-9198: Exploited…); 3 CISA KEV additions (Apache, IBM, N-able); 10 critical advisories…"
type: security-digest-day
section: "Security Digest"
date_published: 2026-08-04
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: August 4, 2026

3 editorial briefs, 3 known exploited (cisa kev) additions and 10 critical advisories.

## Take stock

- Act now: Langflow CVE-2026-9198: Exploited Unauthenticated RCE . Anyone running self-hosted Langflow 1.0.0 through 1.10.0 that is reachable from the internet or an untrusted network.
- Check exposure: ChainDrop . Any team whose lockfile, container image or CI cache contains a flagged version (e.g. keyv 6.0.0, flat-cache 6.1.24, file-entry-cache 11.1.6), or whose repos gained unexpected .claude/ or .vscode/ hook files.
- Check exposure: Evil Twin . Developers and teams whose editors install extensions from Open VSX, especially where workspace or devcontainer files auto-install recommended extensions in CI or cloud dev environments.
- Do you run any of these? IBM Langflow, Apache Tomcat, N-able N-central. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-08-07.
- npm: 10 critical advisories ( flowise-components , flowise ). Check with npm audit (or: npm ls <package>) .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Act now** [Langflow CVE-2026-9198: Exploited Unauthenticated RCE](https://erroneo.us/security/briefs/langflow-cve-2026-9198-kev-unauthenticated-rce/index.md): Langflow is now the most repeatedly exploited AI-agent builder on CISA's list; any network-reachable instance below 1.10.1 should be patched today and checked for compromise.
- **Check exposure** [ChainDrop: npm Worm Trojanizes keyv and cacheable Packages](https://erroneo.us/security/briefs/chaindrop-keyv-npm-worm/index.md): These are deep transitive dependencies of ESLint-style tooling and HTTP stacks, so many projects resolved them without choosing them; if a lockfile picked up a flagged version in August 2026, treat that host as compromised.
- **Check exposure** [Open VSX: 77 Evil-Twin Extensions Leak Developer Data](https://erroneo.us/security/briefs/open-vsx-evil-twin-extensions-mangorbit/index.md): Check whether any of the 77 extension IDs are installed or recommended in your workspaces and remove them; this was reconnaissance, not credential theft, so blanket secret rotation is not needed.

## Known exploited (CISA KEV)

- [CVE-2026-9198](https://erroneo.us/security/cve/CVE-2026-9198/index.md) IBM Langflow: IBM Langflow Code Injection Vulnerability (CISA due 2026-08-07)
- [CVE-2026-34486](https://erroneo.us/security/cve/CVE-2026-34486/index.md) Apache Tomcat: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability (CISA due 2026-08-07)
- [CVE-2026-18556](https://erroneo.us/security/cve/CVE-2026-18556/index.md) N-able N-central: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability (CISA due 2026-08-07)

## Critical advisories

- [CVE-2026-69256](https://erroneo.us/security/cve/CVE-2026-69256/index.md) Flowise: Remote Code Execution Vulnerability in CSVAgent — npm flowise-components <= 3.1.2 → 3.1.3; npm flowise <= 3.1.2 → 3.1.3
- [CVE-2026-69259](https://erroneo.us/security/cve/CVE-2026-69259/index.md) Flowise RCE via SQLite Record Manager Node — npm flowise <= 3.1.2 → 3.1.3; npm flowise-components <= 3.1.2 → 3.1.3
- [CVE-2026-69253](https://erroneo.us/security/cve/CVE-2026-69253/index.md) Flowise Sandbox Escape to RCE — npm flowise <= 3.1.2 → 3.1.3; npm flowise-components <= 3.1.2 → 3.1.3
- [CVE-2026-69255](https://erroneo.us/security/cve/CVE-2026-69255/index.md) Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified — npm flowise <= 3.1.2 → 3.1.3; npm flowise-components <= 3.1.2 → 3.1.3
- [CVE-2026-70478](https://erroneo.us/security/cve/CVE-2026-70478/index.md) Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service — npm flowise <= 3.1.2 → 3.1.3
- [CVE-2026-69251](https://erroneo.us/security/cve/CVE-2026-69251/index.md) Flowise RCE via TypeORM DataSource — npm flowise <= 3.1.2 → 3.1.3; npm flowise-components <= 3.1.2 → 3.1.3
- [CVE-2026-70477](https://erroneo.us/security/cve/CVE-2026-70477/index.md) Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability — npm flowise <= 3.1.2 → 3.1.3; npm flowise-components <= 3.1.2 → 3.1.3
- [CVE-2026-70470](https://erroneo.us/security/cve/CVE-2026-70470/index.md) Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE — npm flowise <= 3.1.2 → 3.1.3; npm flowise-components <= 3.1.2 → 3.1.3
- [CVE-2026-69264](https://erroneo.us/security/cve/CVE-2026-69264/index.md) Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation — npm flowise <= 3.1.2 → 3.1.3; npm flowise-components <= 3.1.2 → 3.1.3
- [CVE-2026-69254](https://erroneo.us/security/cve/CVE-2026-69254/index.md) Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override — npm flowise <= 3.1.2 → 3.1.3; npm flowise-components <= 3.1.2 → 3.1.3

---
Source page: https://erroneo.us/security/2026-08-04/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt