Attackers are actively exploiting a high-severity path traversal flaw in Langflow AI development platform tracked as CVE-2026-5027.