Langflow is the cleaner attacker story. Censys flags multiple unauthenticated remote code execution flaws as raising compromise risk on internet-exposed instances [5], which means no credential step and no user interaction against a host whose function is to execute workflow code. The LiteLLM route runs through the database instead: Censys describes CVE-2026-42208 as an actively exploited pre-authentication SQL injection now carried in CISA's KEV catalog [7]. Both classes sit before authentication, which is what makes a raw exposure count operationally meaningful rather than academic.
The scale reads better as a subtraction. 294,000 minus 183,000 is about 111,000 public IPs that became visible in nine months [13], roughly 12,300 a month [14]. Censys observed about 138,000 internet-exposed ICS hosts in early 2026 [9]. So the nine-month AI addition alone is close to 80% of the entire global exposed ICS estate [16], and the AI total is about 2.1 times that estate [15]. The ICS number moved about 7% across two years by comparison [18].
Severity distribution is the second tell. Of the 18 Langflow CVEs Censys counts between 2024 and 2026, 14 score above CVSS 8.0 [4], or 78% of the total [19]. Four of them reached KEV [4], which is the subset with confirmed exploitation attached.
The ICS series is the useful control here, because it shows what these populations do once counted. Censys reports that about 70% of exposed ICS hosts have appeared on consumer and mobile networks rather than enterprise ones for two and a half years running [10]; applied to the 138,000 total, that is roughly 96,600 systems outside managed environments [20]. The map moved over the same period, with North America at about 38% of exposures, Asia rising from 22.9% in 2024 to 27% in 2026, and Europe falling from 36.1% to 31.1% [11]. The hosting environment did not move at all. That is the prior to carry into the AI figures: populations like this get measured for years before anyone switches them off, and the 294,000 hosts running AI tooling are appearing on the internet faster than the ICS estate anyone has been arguing about since 2024 [2][9].
