Hackers are exploiting CVE-2026-5027, a high-severity path traversal issue in Langflow, for remote code execution.