Signalis
sign in--:--:--UTC
CVEs

CVE-2026-33017

exploited in the wild☆ pin
CVSS
9.8
Reports
17
First seen
Apr 1, 2026
Last seen
Aug 5, 2026
Affected product

Langflow

Associated actors

MuddyWater ×3knaithe / KnYuan ×3JADEPUFFER ×2knaithe ×2ShinyHunters ×2TeamPCP ×2Homeland Justice ×1Interlock Ransomware Group ×1KongTuke ×1Lone operator (45.207.216.55) ×1Operation GriefLure ×1Operation STANDOFF ×1Qilin ×1Red Menshen ×1Silver Dragon ×1Toy Ghouls ×1Turla ×1UNC2814 ×1UNC6353 ×1World Leaks ×1

Recent reports

Critical

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

The Hacker NewsHigh

Chinese threat actor uses DeepSeek AI to autonomously attack vulnerable servers

Bleeping ComputerHigh

Chinese Threat Actor Uses DeepSeek AI via Hermes Agent for Autonomous Exploitation

The Hacker NewsHigh

ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories

The Hacker NewsHigh

Chinese-Speaking Threat Actor Deploys AI-Driven Autonomous Cyberattacks Using DeepSeek and Hermes Agent

Palo Alto Unit 42Critical

CISA Orders Urgent Patching of Actively Exploited Langflow RCE Flaw CVE-2026-0770

Bleeping ComputerHigh

JADEPUFFER Deploys ENCFORGE Ransomware Targeting AI Model Files via Langflow RCE

The Hacker NewsHigh

CISA orders federal agencies to patch actively exploited Langflow authentication bypass

Bleeping ComputerCritical

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog

The Hacker NewsHigh

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

The Hacker NewsHigh

Threat Intelligence Report – 29 June: Breaches, AI Threats, and Active Exploits

Check Point ResearchHigh

CVE-2026-33017 Langflow RCE Exploited for Monero Cryptomining Campaign

Trend Micro ResearchHigh

Path traversal flaw in Langflow AI platform actively exploited

Bleeping ComputerHigh

Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE

The Hacker NewsHigh

ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories

The Hacker NewsCritical

March 2026 CVE Landscape: 31 High-Impact Vulnerabilities, Interlock Ransomware Exploits Cisco FMC Zero-Day

Recorded Future InsiktHigh

CERT-EU Cyber Brief March 2026 – Espionage, Supply-Chain Attacks, Iran Conflict Disruptions

CERT-EU Threat Intel

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans