Max-severity bug in widely used OT programming tool exploited to deliver Linux malware

Unknown criminals are exploiting a maximum-severity vulnerability in Node-RED, a flow-based programming tool that is widely used in critical infrastructure, to deploy a flow that downloads and runs a Linux bot.

The Register · 2026-11-02T22:55:17.000Z