CVE-2026-33017: How attackers compromised Langflow AI pipelines in 20 hours

Reported 20 Mar 2026 by otx · Severity: medium

A critical vulnerability in Langflow, an open-source visual framework for AI agents and RAG pipelines, was disclosed on March 17, 2026. The vulnerability, CVE-2026-33017, allows unauthenticated remote code execution on exposed Langflow instances. Within 20 hours, exploitation att