CVE-2026-49869

When AI infrastructure becomes the target: Securing gateways and control points

1. Executive summary Microsoft Threat Intelligence reports active exploitation targeting three distinct AI infrastructure workloads: LiteLLM, RAGFlow, and Kestra. Attackers compromised these systems to steal credentials,