#langflow hashtag - Bluesky

1 day ago

CISA: New Langflow flaw actively exploited to hijack AI workflows The Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are actively exploiting a critical vulnerability identified as CVE-2026-33017, which affects the Langflow framework for building AI agents. [...]

#CISA: New #Langflow flaw actively exploited to hijack #AI workflows

www.bleepingcomputer.com/news/security/cisa-new-l...

#cybersecurity

1 0 1 0

2rZiKKbOU3nTafniR2qMMSE0gwZ

@2rzikkbou3ntafnir2qmmse0gwz.activitypub.awakari.com.ap.brid.gy

2 days ago

Original post on helpnetsecurity.com

CISA sounds alarm on Langflow RCE, Trivy supply chain compromise after rapid exploitation The US Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Kno...

#Don't #miss #Hot #stuff #News #Aqua #Security #CISA […]

[Original post on helpnetsecurity.com]

0 0 0 0

2rZiKKbOU3nTafniR2qMMSE0gwZ

@2rzikkbou3ntafnir2qmmse0gwz.activitypub.awakari.com.ap.brid.gy

2 days ago

Langflow RCE flaw exploited within hours, CISA warns The US cybersecurity agency CISA has flagged a critical code injection flaw in Langflow, the open-source visual framework widely used to build A...

#Security #AI #security #CISA #CVE-2026-33017 #Known […]

[Original post on techzine.eu]

0 0 0 0

Cybersecurity News Everyday

@hendryadrian.bsky.social

3 days ago

CISA: New Langflow flaw actively exploited to hijack AI workflows CISA warns that CVE-2026-33017, a critical code injection vulnerability in the Langflow AI-agent framework, is being actively exploited for unauthenticated remote code execution that can build public flows. Endor Labs observed exploitation beginning about 20 hours after disclosure with rapid scanning, Python-based attacks, and data harvesting; agencies are urged to upgrade to Langflow 1.9.0 or disable the vulnerable endpoint. #CVE-2026-33017 #Langflow

CISA reports active exploitation of CVE-2026-33017, a critical code injection flaw in Langflow AI-agent framework enabling unauthenticated remote Python code execution. Upgrade to Langflow 1.9.0 recommended. #Langflow #CISA #USA

3 0 1 0

piggo

@pigondrugs.bsky.social

4 days ago

CISA Adds Langflow Flaw to KEV

~Cisa~
CISA added CVE-2026-33017, an actively exploited Langflow code injection flaw, to its KEV catalog.
-
IOCs: CVE-2026-33017
-
#CVE202633017 #Langflow #threatintel

0 0 0 0

Ignacio G.R. Gavilán

@igrgavilan.bsky.social

6 days ago

I've just finished "Mastering LangFlow" (www.amazon.es/Mastering-La...) by Rowan J. Ashford. Deceptive: it does not really explain LangFlow #libros #books #LangFlow #LangChain #RAG #AgenticAI

0 0 0 0

Cybersecurity News Everyday

@hendryadrian.bsky.social

1 week ago

CVE-2026-33017: How attackers compromised Langflow AI pipelines in 20 hours CVE-2026-33017 is an unauthenticated remote code execution flaw in Langflow's public flow build endpoint that attackers weaponized within ~20 hours of disclosure to execute arbitrary Python and exfiltrate credentials. Sysdig's honeypots recorded rapid, multi-stage exploitation—nuclei-based scanning, custom Python exploit scripts, and staged dropper/C2 infrastructure—that harvested environment variables, .env files, and database artifacts. #Langflow #CVE-2026-33017

CVE-2026-33017 is an unauthenticated remote code execution flaw in Langflow’s public flow build endpoint, exploited within 20 hours to run arbitrary Python and steal credentials via multi-stage attacks. #Langflow #RemoteCode #Exploit2026

2 0 0 0

Patrick Duggan

@hakksaww.bsky.social

1 week ago

The AI agent builder got owned in 20 hours. Langflow CVE-2026-33017: one HTTP request, no auth, full RCE. Your AI pipeline keys are the prize. Fifth data point in the pattern. www.dugganusa.com/post/the-ai-agent-builde... #Langflow #AIsecurity #CVE202633017

1 1 1 0

The Daily Tech Feed

@thedailytechfeed.com

1 week ago

Critical #Langflow vulnerability CVE-2026-33017 exploited within 20 hours of disclosure. Immediate action required to mitigate risk. #CyberSecurity #InfoSec #VulnerabilityManagement Link: thedailytechfeed.com/langflow-cve...

0 0 0 0

woody｜AI×実用ツール専門

@woody-ai-tools.bsky.social

1 week ago

LangflowのCVE-2026-33017、公開20時間以内に実攻撃が開始 | lilting channel 未認証のRCEを可能にするCVSS9.3の脆弱性。公表から20時間以内に攻撃が確認された。

【警告】AIエージェント構築で人気のLangflowに深刻な脆弱性(CVE-2026-33017)が発覚。公開から20時間足らずで攻撃が始まってるようです。認証なしでリモートコード実行(RCE)が可能な状態なので、運用中の人は即座にアップデートかアクセス制限を！

開発環境のAIツール、セキュリティ甘く見てると一瞬でやられますね…😱

みんなの環境は大丈夫？
#AI #セキュリティ #OSS #Langflow

lilting.ch/articles/langflow-cve-20...

0 0 0 0

Checkmarx Zero

@checkmarxzero.bsky.social

1 week ago

A critical unauthenticated #RCE vulnerability (CVE-2026-33017) has been identified in #Langflow.

The /api/v1/build_public_tmp/{flow_id}/flow endpoint allows attackers to supply malicious flow data containing arbitrary Python code, which is executed via exec() without sandboxing.

1 1 1 0