Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure
Summary: A critical missing-authentication and code-injection flaw in Langflow, tracked as CVE-2026-33017 with a CVSS score of 9.3, was exploited in the wild within 20 hours of its March 17, 2026 advisory, before any public proof-of-concept existed. The bug affects all versions up to and including 1.8.1 and lets an unauthenticated attacker send one HTTP POST request with attacker-controlled flow data to reach an unsandboxed exec() call, yielding remote code execution; it is fixed in development version 1.9.0.dev8.
What's compelling: Sysdig observed attackers building working exploits directly from the advisory text and harvesting keys, credentials, and .env files, while Rapid7 puts median patch deployment at about 20 days against a five-day median to CISA KEV inclusion - so the exposure window is measured in weeks, not hours.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-3248CVE-2026-33017
- Related
- Lang Chain, Lang Graph Flaws Expose Files, Secrets, Databases in Widely Used AI Frameworks Cyber Risks ·CVE-2026-33017: Langflow Code Injection Vulnerability Known Exploited Vulnerabilities · Mar 25, 2026