CISA: New Langflow flaw actively exploited to hijack AI workflows
CISA warns of active exploitation of critical Langflow RCE flaw CVE-2026-33017 affecting AI workflow builders.
CISA added CVE-2026-33017, a critical code injection vulnerability in Langflow (CVSS 9.3), to its Known Exploited Vulnerabilities list after hackers began actively exploiting it within 20 hours of the advisory release. The flaw allows unauthenticated remote code execution and arbitrary Python code execution in Langflow versions 1.8.1 and earlier, enabling attackers to hijack AI workflows. Federal agencies have until April 8 to patch to version 1.9.0 or apply mitigations.
AI summary of the linked source. Not reviewed by an editor. How this works
The lesson from this incident
Full lessonA critical code injection vulnerability (CVE-2026-33017) in Langflow, an AI workflow platform, was actively exploited by attackers within just 20 hours of the security advisory being published. The flaw allows unauthenticated remote code execution, meaning attackers can run arbitrary Python code without needing any credentials. This demonstrates how quickly threat actors can weaponize newly disclosed vulnerabilities, especially in popular development platforms. Organizations using affected AI tools face immediate risk of workflow hijacking and unauthorized system access.
What helps against this
How we list vendors- Automated patch management
Known holes get closed in days, not months.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-33017
- cve — CVE-2025-3248