#ai-security

Langflow RCE flaw exploited within 20 hours of disclosure, no PoC needed

CVE-2026-33017 gives attackers unauthenticated remote code execution on Langflow AI platforms with a single HTTP request. Exploitation began 20 hours after disclosure, no proof-of-concept needed.