ctrlINT What the industry said about every indicator, with the quote

CVE-2026-33017Vulnerability

Langflow Code Injection Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 4 independent sources · first reported by Trend Micro Research · last reported

Last reported 27 days ago

CISA KEVAdded 25 Mar 2026
Fix due 8 Apr 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS24.8%
higher than 97% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

4 reports, newest first · the exact sentence from each

  1. “On March 26, CISA reported active exploitation of CVE-2026-33017, a critical vulnerability in the Langflow AI workflow framework.”

    CERT-EUGovernment
    Cyber Brief 26-04 - March 2026

  2. “CVE-2026-33017”

    Recorded FutureVendor
    August 2026 CVE Landscape

  3. “CVE-2026-33017 (CVSS rating: 9.8): Langflow vulnerability with autonomous exploitation attempt (failed — auto_login disabled)”

    Infosecurity MagazineNews
    Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits

  4. “From Langflow to Monero: Inside CVE-2026-33017 Cryptominer”

    Trend Micro ResearchVendor
    From Langflow to Monero: Inside CVE-2026-33017 Cryptominer

Indicators reported together

named in the same reports

Also named with it: CVE-2026-33824, CVE-2026-0300, CVE-2026-34486, CVE-2026-39987, CVE-2026-3055, CVE-2025-68613, CVE-2026-21858, CVE-2025-49113, CVE-2026-68820, CVE-2026-65400, CVE-2026-60004, CVE-2026-64849, CVE-2026-22719, CVE-2017-0199, CVE-2022-0847, CVE-2025-3248, CVE-2026-63030, CVE-2021-3156, CVE-2021-29441, CVE-2026-12569

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-33017 here?
No account needed. We do not store your IP address.