CVE-2026-33017 – Langflow Remote Code Execution Vulnerability

Langflow addresses a critical vulnerability tracked as CVE-2026-33017 that enables remote code execution. The CVSS score is 9.3, which is Critical severity. This level of access allows attackers to execute arbitrary code, potentially taking full control of affected systems, accessing sensitive data, or disrupting operations.

Proof-of-concept code is available, increasing the likelihood of exploitation. While there is no confirmed real-world attack activity yet, the presence of a working PoC significantly lowers the barrier for threat actors and raises urgency for patching.