The Hacker News
June 30, 2026
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
CVE-2026-33017 lets attackers abuse an unauthenticated Langflow API endpoint, run Lambsys, and spread via reused SSH keys.
Advertisement
Advertisement