[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fczuzKE1qSlFk-ORKtCH1Nh3ziaaqC0TXNboRImyjKyY":3},{"article":4,"iocs":37,"watch_terms":45,"solutions":46,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":17,"category":18,"article_tags":21},"72fde61e-fb6f-4e64-8a03-15fa9cb026f0","CISA: New Langflow flaw actively exploited to hijack AI workflows","cisa-new-langflow-flaw-actively-exploited-to-hijack-ai-workflows","The Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are actively exploiting a critical vulnerability identified as CVE-2026-33017, which affects the Langflow framework for building AI agents. [...]","CISA added CVE-2026-33017, a critical code injection vulnerability in Langflow (CVSS 9.3), to its Known Exploited Vulnerabilities list after hackers began actively exploiting it within 20 hours of the advisory release. The flaw allows unauthenticated remote code execution and arbitrary Python code execution in Langflow versions 1.8.1 and earlier, enabling attackers to hijack AI workflows. Federal agencies have until April 8 to patch to version 1.9.0 or apply mitigations.","CISA warns of active exploitation of critical Langflow RCE flaw CVE-2026-33017 affecting AI workflow builders.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fcisa-new-langflow-flaw-actively-exploited-to-hijack-ai-workflows\u002F",null,"2026-03-26T19:17:43+00:00","2026-03-26T21:00:09.526671+00:00",9,[],"574f766a-fb3f-487c-8d2c-0720ae75471b",{"id":17,"icon":12,"name":19,"slug":20},"Zero-day","zero-day",[22,27,32],{"category":23},{"id":24,"icon":12,"name":25,"slug":26},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":28},{"id":29,"icon":12,"name":30,"slug":31},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":33},{"id":34,"icon":12,"name":35,"slug":36},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",[38,42],{"type":39,"value":40,"context":41},"cve","CVE-2026-33017","Critical code injection vulnerability in Langflow allowing unauthenticated RCE",{"type":39,"value":43,"context":44},"CVE-2025-3248","Prior critical API endpoint flaw in Langflow (May 2025) allowing unauthenticated RCE",[],{"controls":47,"vendors":134},[48,77,106],{"slug":49,"name":50,"problem":51,"products":52},"patch-management","Automated patch management","Known holes get closed in days, not months.",[53,61,69],{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":78,"name":79,"problem":80,"products":81},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[82,90,98],{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"slug":31,"name":107,"problem":108,"products":109},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[110,118,126],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",[],{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":146},"critical-ai-platform-vulnerability-exploited-within-hours","Critical AI Platform Vulnerability Exploited Within Hours","A critical code injection vulnerability (CVE-2026-33017) in Langflow, an AI workflow platform, was actively exploited by attackers within just 20 hours of the security advisory being published. The flaw allows unauthenticated remote code execution, meaning attackers can run arbitrary Python code without needing any credentials. This demonstrates how quickly threat actors can weaponize newly disclosed vulnerabilities, especially in popular development platforms. Organizations using affected AI tools face immediate risk of workflow hijacking and unauthorized system access.",[140,141,142,143,144,145],"CIS Control 7","CIS Control 2","NIST SI-2","NIST AC-1","NIST CM-8","NIST SI-4",{}]