LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
cve recordcriticalexploited in the wildzero day3 of 3 cataloguesexploit reported

CVE-2026-33017

Langflow · Langflow · Langflow Code Injection Vulnerability

Published · Added to CISA KEV
CVSS9.8
Severitycritical
WeaknessCWE-94
EPSS24.8%97.9th percentile
Exploited3 KEV sources
Ransomware useUnknown
Federal fix dueApr 8, 2026

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

patch window

Called exploited 1 days before disclosure.

Measured from the CVE publication date to the earliest of 3 KEV catalogues that list it.

The life of this vulnerability

  1. CVE published
  2. First KEV listing1d
  3. Last KEV listing6d
  4. Last sighting5mo

Gaps are compressed to equal steps. The elapsed time is printed under each.

Which catalogues call it exploited

Sources3 of 3
Listings differ by6 d
Strongest claimconfirmed

3 catalogues list it. CIRCL aggregates the others and is shown but not counted.

Public exploitation evidence

16 public reports collected from VulnCheck and CIRCL, first on Mar 19, 2026. Each links to its original source. We have not verified them.

Description

Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows without requiring authentication. When the optional data parameter is supplied, the endpoint uses attacker-controlled flow data (containing arbitrary Python code in node definitions) instead of the stored flow data from the database. This code is passed to exec() with zero sandboxing, resulting in unauthenticated remote code execution. This is distinct from CVE-2025-3248, which fixed /api/v1/validate/code by adding authentication. The build_public_tmp endpoint is designed to be unauthenticated (for pu

Required action (CISA)

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

References

← Back to the CVE Tracker

Our coverage of CVE-2026-33017

CVE-2025-3248

The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure

Since late July 2026, a cluster of seven incidents involving autonomous or semi-autonomous AI systems deployed for offensive cyber operations has been tracked, indicating a shift from theoretical risk to operational reality. The most prominent of these, confirmed by Taiwan’s Ministry of Digital Affairs on August 13, 2026, involved a near-autonomous AI cyberattack against government infrastructure.

CVE-2026-46300high

Metasploit Wrap Up: Lot of summer shells and fit http profiles

Metasploit has released a significant update, introducing thirteen new modules that address a variety of vulnerabilities, including several remote code execution (RCE) flaws. The update also brings enhancements to the framework's capabilities, such as support for HTTP malleable profiles and improved functionality for Windows on ARM architectures.

CVE-2026-33017high

Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits

A Chinese threat actor has reportedly leveraged large language models (LLMs), including DeepSeek AI's Hermes Agent, to automate and accelerate vulnerability exploitation campaigns against internet-exposed infrastructure in Asia. The actor, known by the aliases 'knaithe' and 'KnYuan' and believed to be based in Zhuhai, China, is described as an opportunistic exploit operator and binary security…

CVE-2026-55255critical

Attackers using Langflow flaw for credential harvesting (CVE-2026-55255)

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in the Langflow AI framework to its Known Exploited Vulnerabilities catalog. This flaw, identified as CVE-2026-55255, has been observed being actively exploited in the wild by threat actors.

CVE-2026-48282critical

U.S. CISA adds Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder flaws to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities affecting Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder to its Known Exploited Vulnerabilities (KEV) catalog. This directive mandates that federal agencies patch these vulnerabilities by July 10, 2026, to mitigate risks from active exploitation. Private…

CVE-2026-20245high

Texas Parks and Wildlife, WordPress Plugin Vendor Hit by Data Breaches

The Texas Parks and Wildlife Department has confirmed a data breach affecting its hunting and fishing license system vendor, exposing personal information for over 3 million customers. Separately, ShapedPlugin, a vendor of WordPress plugins, suffered a supply chain attack that delivered malicious updates to its paid plugins.

CVE-2026-20245high

29th June – Threat Intelligence Report

A recent threat intelligence report has detailed a range of cyber incidents, from supply chain attacks and data breaches affecting major companies to the exploitation of artificial intelligence technologies for malicious purposes. The report highlights the ongoing evolution of cyber threats, emphasizing the need for robust security measures across various sectors.