Node-RED critical flaw exploited in active attacks

A critical vulnerability in Node-RED is being actively exploited by attackers from the same IP address to deploy malicious payloads including Linux botnets and webshells. The flaw allows unauthenticated remote code execution. Organizations running Node-RED should update immediately and review logs for suspicious activity or signs of compromise.