Vulnerabilities & Exploits · Web App Attack

Langflow Vulnerability Exploited Within 20 Hours

Attackers harvested keys and credentials from exposed instances. That access risks connected databases and potential software supply-chain compromise.

3 sources · Mar 20

Timeline

• Apr 8 CISA federal deadline for CVE-2026-33017
• Mar 25 CVE-2026-33017 added to CISA KEV
• Mar 20 Reported by The Hacker News

Sources

• Mar 20 The Hacker News

  Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure

  Langflow CVE-2026-33017 exploited in 20 hours after disclosure, enabling RCE via exec(), exposing systems before patching cycles.

  original

• Mar 20 Infosecurity Magazine

  Hackers Exploit Critical Langflow Bug in Just 20 Hours

  Sysdig details how threat actors exploited a critical CVE in Langflow in less than a day

  original

• Mar 20 SecurityWeek

  Critical Langflow Vulnerability Exploited Hours After Public Disclosure

  Because attacker-supplied flow data is used in public flows, the bug leads to unauthenticated remote code execution.

  original

Part of the PlainSec briefing for 2026-03-21

Every edition of this story: Langflow Vulnerability Exploited Within 20 Hours

More from today

• Interlock Ransomware Uses Zero-Day to Compromise Firewalls
• Critical SharePoint Flaw Being Actively Exploited
• ScreenConnect Flaw and SILENTCONNECT Loader Enable Unauthorized Access