⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-33017: Langflow RCE Vulnerability

June 25, 2026

A critical RCE vulnerability in Langflow (CVSS 9.8) that was exploited by the AI-driven threat actor but failed due to restrictive configurations.

Discovered from: CISA Adds Langflow, Apache Tomcat, and N-able N-central Flaws to KEV Catalog Amid Active Exploitation