Attackers Target Flowise AI Agents With Credential Theft, Prompt Injection and Workflow Hijacking

An attacker used an exposed Flowise AI orchestration server to enumerate workflows, harvest credentials, and try to turn its language-model agent into an offensive analysis assistant. Sekoia says the findings were first shared in a private FLINT report on 7 September 2026. The honeypot emulated Flowise 2.2.8 and captured requests without running... Weiterlesen: Attackers Target Flowise AI Agents With Credential Theft, Prompt Inje…