{"id":1632,"date":"2026-06-12T12:19:37","date_gmt":"2026-06-12T05:19:37","guid":{"rendered":"https:\/\/vncybers.vn\/lo-hong-thuc-thi-ma-tu-xa-rce-trong-langflow-dang-bi-khai-thac-tich-cuc-2\/"},"modified":"2026-06-12T12:19:43","modified_gmt":"2026-06-12T05:19:43","slug":"lo-hong-thuc-thi-ma-tu-xa-rce-trong-langflow-dang-bi-khai-thac-tich-cuc-2","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/lo-hong-thuc-thi-ma-tu-xa-rce-trong-langflow-dang-bi-khai-thac-tich-cuc-2\/","title":{"rendered":"L\u1ed7 h\u1ed5ng th\u1ef1c thi m\u00e3 t\u1eeb xa (RCE) trong Langflow \u0111ang b\u1ecb khai th\u00e1c t\u00edch c\u1ef1c"},"content":{"rendered":"

L\u1ed7 h\u1ed5ng th\u1ef1c thi m\u00e3 t\u1eeb xa (RCE) trong Langflow \u0111ang b\u1ecb khai th\u00e1c t\u00edch c\u1ef1c<\/h2>\n

C\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt v\u1eeba ph\u00e1t hi\u1ec7n m\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng quy m\u00f4 l\u1edbn nh\u1eafm v\u00e0o Langflow<\/strong> – n\u1ec1n t\u1ea3ng m\u00e3 ngu\u1ed3n th\u1ea5p (low-code) ph\u1ed5 bi\u1ebfn \u0111\u1ec3 x\u00e2y d\u1ef1ng c\u00e1c \u1ee9ng d\u1ee5ng v\u00e0 t\u00e1c nh\u00e2n AI. L\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng n\u00e0y cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng th\u1ef1c thi m\u00e3 t\u1eeb xa (RCE) m\u00e0 kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c, \u0111e d\u1ecda tr\u1ef1c ti\u1ebfp \u0111\u1ebfn c\u00e1c h\u1ec7 th\u1ed1ng \u1ee9ng d\u1ee5ng AI v\u00e0 d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m c\u1ee7a doanh nghi\u1ec7p.<\/p>\n

\"L\u1ed7<\/p>\n

Chi ti\u1ebft v\u1ec1 l\u1ed7 h\u1ed5ng CVE-2026-5027<\/h3>\n

L\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c \u0111\u1ecbnh danh l\u00e0 CVE-2026-5027<\/strong> v\u1edbi \u0111i\u1ec3m s\u1ed1 CVSS l\u00e0 8.8 (m\u1ee9c \u0111\u1ed9 nghi\u00eam tr\u1ecdng cao). \u0110\u00e2y l\u00e0 m\u1ed9t l\u1ed7i li\u00ean quan \u0111\u1ebfn k\u1ef9 thu\u1eadt Path Traversal<\/strong> (duy\u1ec7t \u0111\u01b0\u1eddng d\u1eabn) n\u1eb1m trong ch\u1ee9c n\u0103ng t\u1ea3i t\u1ec7p l\u00ean c\u1ee7a h\u1ec7 th\u1ed1ng. Do vi\u1ec7c thi\u1ebfu ki\u1ec3m so\u00e1t v\u00e0 l\u00e0m s\u1ea1ch (sanitize) tham s\u1ed1 t\u00ean t\u1ec7p trong y\u00eau c\u1ea7u t\u1ea3i l\u00ean, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 ch\u00e8n c\u00e1c chu\u1ed7i k\u00fd t\u1ef1 nh\u01b0 ..\/<\/code> \u0111\u1ec3 ghi t\u1ec7p v\u00e0o b\u1ea5t k\u1ef3 v\u1ecb tr\u00ed n\u00e0o tr\u00ean h\u1ec7 \u0111i\u1ec1u h\u00e0nh m\u00e1y ch\u1ee7.<\/p>\n

Theo b\u00e1o c\u00e1o t\u1eeb VulnCheck<\/strong>, v\u00ec Langflow th\u01b0\u1eddng b\u1eadt ch\u1ebf \u0111\u1ed9 t\u1ef1 \u0111\u1ed9ng \u0111\u0103ng nh\u1eadp kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c theo m\u1eb7c \u0111\u1ecbnh, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 d\u1ec5 d\u00e0ng truy c\u1eadp v\u00e0o \u0111i\u1ec3m cu\u1ed1i (endpoint) POST \/api\/v2\/files<\/code> v\u00e0 th\u1ef1c hi\u1ec7n h\u00e0nh vi ghi t\u1ec7p \u0111\u1ed9c h\u1ea1i m\u00e0 kh\u00f4ng c\u1ea7n b\u1ea5t k\u1ef3 th\u00f4ng tin \u0111\u0103ng nh\u1eadp n\u00e0o.<\/p>\n

T\u1eeb ghi t\u1ec7p \u0111\u1ebfn chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n h\u1ec7 th\u1ed1ng<\/h3>\n

Vi\u1ec7c c\u00f3 th\u1ec3 ghi t\u1ec7p t\u00f9y \u00fd l\u00e0 b\u01b0\u1edbc \u0111\u1ec7m nguy hi\u1ec3m d\u1eabn \u0111\u1ebfn chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n ho\u00e0n to\u00e0n (RCE). K\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3:<\/p>\n

    \n
  • Ghi \u0111\u00e8 c\u00e1c t\u1ec7p c\u1ea5u h\u00ecnh quan tr\u1ecdng.<\/li>\n
  • Ch\u00e8n m\u00e3 Python \u0111\u1ed9c h\u1ea1i v\u00e0o c\u00e1c th\u01b0 m\u1ee5c ch\u1ee9a plugin ho\u1eb7c workflow.<\/li>\n
  • T\u1ea1o c\u00e1c t\u1ec7p th\u1ef1c thi trong th\u01b0 m\u1ee5c kh\u1edfi \u0111\u1ed9ng c\u1ee7a h\u1ec7 th\u1ed1ng.<\/li>\n<\/ul>\n

    Hi\u1ec7n t\u1ea1i, c\u00e1c c\u00f4ng c\u1ee5 t\u00ecm ki\u1ebfm h\u1ea1 t\u1ea7ng m\u1ea1ng \u0111\u00e3 ghi nh\u1eadn h\u01a1n 7.000 th\u1ef1c th\u1ec3 Langflow \u0111ang c\u00f4ng khai tr\u00ean internet, ph\u1ea7n l\u1edbn t\u1eadp trung t\u1ea1i khu v\u1ef1c B\u1eafc M\u1ef9 v\u00e0 Ch\u00e2u \u00c2u, bi\u1ebfn ch\u00fang th\u00e0nh m\u1ee5c ti\u00eau b\u00e9o b\u1edf cho c\u00e1c nh\u00f3m tin t\u1eb7c.<\/p>\n

    Khuy\u1ebfn ngh\u1ecb kh\u1ea9n c\u1ea5p<\/h3>\n

    C\u1ed9ng \u0111\u1ed3ng b\u1ea3o m\u1eadt khuy\u1ebfn c\u00e1o c\u00e1c t\u1ed5 ch\u1ee9c \u0111ang s\u1eed d\u1ee5ng Langflow th\u1ef1c hi\u1ec7n ngay c\u00e1c bi\u1ec7n ph\u00e1p sau:<\/p>\n

      \n
    • C\u1eadp nh\u1eadt ngay l\u1eadp t\u1ee9c:<\/strong> Ki\u1ec3m tra v\u00e0 n\u00e2ng c\u1ea5p l\u00ean phi\u00ean b\u1ea3n m\u1edbi nh\u1ea5t \u0111\u00e3 \u0111\u01b0\u1ee3c v\u00e1 l\u1ed7i t\u1eeb nh\u00e0 ph\u00e1t tri\u1ec3n.<\/li>\n
    • H\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp:<\/strong> Kh\u00f4ng c\u00f4ng khai giao di\u1ec7n qu\u1ea3n tr\u1ecb Langflow tr\u1ef1c ti\u1ebfp ra internet. S\u1eed d\u1ee5ng VPN ho\u1eb7c c\u00e1c l\u1edbp x\u00e1c th\u1ef1c b\u1ed5 sung (SSO\/IAP).<\/li>\n
    • Ch\u1eb7n endpoint nguy hi\u1ec3m:<\/strong> N\u1ebfu kh\u00f4ng c\u1ea7n thi\u1ebft, h\u00e3y c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda \u1ee9ng d\u1ee5ng (WAF) ho\u1eb7c Proxy \u0111\u1ec3 ch\u1eb7n c\u00e1c y\u00eau c\u1ea7u \u0111\u1ebfn \/api\/v2\/files<\/code> t\u1eeb c\u00e1c ngu\u1ed3n kh\u00f4ng tin t\u01b0\u1edfng.<\/li>\n<\/ul>\n

      S\u1ef1 vi\u1ec7c n\u00e0y m\u1ed9t l\u1ea7n n\u1eefa c\u1ea3nh b\u00e1o v\u1ec1 r\u1ee7i ro b\u1ea3o m\u1eadt trong chu\u1ed7i cung \u1ee9ng c\u00f4ng c\u1ee5 AI. Khi c\u00e1c doanh nghi\u1ec7p ch\u1ea1y \u0111ua t\u00edch h\u1ee3p AI, vi\u1ec7c \u0111\u1ea3m b\u1ea3o an to\u00e0n cho ch\u00ednh c\u00e1c n\u1ec1n t\u1ea3ng x\u00e2y d\u1ef1ng AI l\u00e0 nhi\u1ec7m v\u1ee5 \u01b0u ti\u00ean h\u00e0ng \u0111\u1ea7u.<\/p>\n

      VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb SecurityWeek v\u00e0 VulnCheck<\/em><\/p>","protected":false},"excerpt":{"rendered":"

      L\u1ed7 h\u1ed5ng th\u1ef1c thi m\u00e3 t\u1eeb xa (RCE) trong Langflow \u0111ang b\u1ecb khai th\u00e1c t\u00edch c\u1ef1c C\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt v\u1eeba ph\u00e1t hi\u1ec7n m\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng quy m\u00f4 l\u1edbn nh\u1eafm v\u00e0o Langflow – n\u1ec1n t\u1ea3ng m\u00e3 ngu\u1ed3n th\u1ea5p (low-code) ph\u1ed5 bi\u1ebfn \u0111\u1ec3 x\u00e2y d\u1ef1ng c\u00e1c \u1ee9ng d\u1ee5ng v\u00e0 t\u00e1c nh\u00e2n AI. L\u1ed7 […]<\/p>\n","protected":false},"author":2,"featured_media":1631,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1632","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1632","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1632"}],"version-history":[{"count":1,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1632\/revisions"}],"predecessor-version":[{"id":1635,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1632\/revisions\/1635"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1631"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1632"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1632"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1632"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}