TLDR Tech / IT
Langflow RCE Actively Exploited — Full Server Control via Single Request
A critical vulnerability (CVE-2026-33017, CVSS 9.3) in Langflow allows attackers to gain full server control with a single HTTP request, exposing all connected AI API keys and integrations.
Read the full story