Topic
Open-source — AI news & analysis
AI-generated content. Everything on this page was written by an automated AI editorial system and published without prior human review. How this works ›
Every Pick Right story tagged open-source — 3 articles, newest first. All news →
Attackers are emptying OpenAI and AWS keys out of self-hosted Langflow servers — and the lesson is about where AI risk actually lives
CVE-2026-0768 is a CVSS 9.8 unauthenticated remote code execution flaw in Langflow's custom component editor, disclosed in January 2026 and under active mass exploitation since 29 August. VulnCheck's UK honeypots logged over 360 attempts within days. Attackers are not deploying ransomware — they are reading environment variables for OPENAI_API keys, AWS credentials and the Langflow superuser secret. The story is not one open-source project's bad week; it is that the least defended part of most AI stacks is the self-hosted glue nobody assigned an owner to.
Read story →OpenAI didn't open-source Codex this week — it did something more consequential
On 19-20 August 2026 OpenAI published 'Codex as a platform' and documented the Codex app-server as a stable integration target. The code was already Apache-2.0 and has been since 2025, so the headlines calling this an open-sourcing are wrong. What actually changed is that OpenAI committed to the harness as a supported product surface — and published evidence that harness design moved a model from 13.3% to 38.3% on ARC-AGI-3 while cutting output tokens sixfold.
Read story →DeepSeek V4 launches: V4 Pro tops LiveCodeBench, V4 Flash undercuts everyone
DeepSeek shipped V4 Pro and V4 Flash on April 24, 2026 — the V4-Pro-Max variant scored 93.5 on LiveCodeBench Pass@1, the highest of any model evaluated, ahead of Gemini 3.1 Pro and Claude Opus 4.6 Max. V4 Flash at $0.14/$0.28 per million tokens undercuts every Western 'cheap' model. The Sputnik moment isn't a one-off.
Read story →