CVE-2026-33017

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

March 20, 2026

Last Seen

October 14, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in IBM Langflow Under Active Exploitation80.3

IBM Langflow OSS is facing a critical remote code execution (RCE) vulnerability, tracked as CVE-2026-9198, which allows unauthenticated attackers to execute arbitrary code on default deployments. The vulnerability combines an authentication bypass with a code execution flaw, enabling attackers to ga...

ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability77.3

A critical zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft has been exploited by the ShinyHunters group, leading to breaches of over 100 organizations, primarily in the education sector. The vulnerability allows unauthenticated remote code execution, enabling attackers to compromise sys...

Critical CVE-2026-0768 Exploited in Langflow Attacks75.0

Hackers are actively exploiting a critical vulnerability in Langflow, tracked as CVE-2026-0768, which allows unauthenticated remote code execution. The flaw affects all versions up to 1.4.2 of the AI-focused low-code platform Langflow, enabling attackers to execute arbitrary Python code with root pr...

Langflow RCE Vulnerability Leads to Monero Cryptominer Deployment73.5

Threat actors are exploiting CVE-2026-33017, a critical unauthenticated remote code execution vulnerability in Langflow, to compromise exposed AI application servers. This exploitation allows attackers to deploy a customized Monero (XMR) cryptominer silently. The vulnerability was published on March...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (12)

1 / 3

Related Entities

Woodgnat KongTuke Zero-day Exploit Data Breach Malware Code Injection Supply Chain Attack Remote Code Execution Botnet Phishing Data Theft Credential Theft

CVE-2026-33017

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (12)

Critical RCE Vulnerability in IBM Langflow Under Active Exploitation

ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability

Critical CVE-2026-0768 Exploited in Langflow Attacks

Langflow RCE Vulnerability Leads to Monero Cryptominer Deployment

Langflow CVE-2026-33017 Exploited for AWS Key Theft and Botnet Deployment

Critical Vulnerabilities in Dell Wyse Management Suite Enable Remote Code Execution

Critical Langflow RCE Vulnerability Exploited Within 20 Hours

LiteLLM Python Package Compromised in Major Supply Chain Attack by TeamPCP

Multiple High-Risk Vulnerabilities Found in IBM Langflow OSS

Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

Vulnerabilities in Agentic Red-Team Tools Enable API Key Theft and Host Compromise

DeepSeek AI Used in Autonomous Cyberattack Campaign by Chinese Threat Actor

Related Articles (23)

Langflow 1.12.3 Fixes 25 CVEs, Two Unauth RCEs at 9.8

VulnCheck logged over 360 exploitation attempts on its UK honeypots

Langflow Remote Code Execution Vulnerability Exploited in Attacks (CVE-2026-0768)

Critical Langflow flaw exploited to steal OpenAI and AWS keys

Critical RCE in IBM Langflow Triggers CISA Emergency Deadline

BleepingComputer summarised the finding

Unit 42 Ties DeepSeek Agent to 460+ Autonomous Hack Attempts

DeepSeek Ran Autonomous Cyberattacks That Claude and OpenAI Safety Controls Blocked

Mistic Malware Blends Into Microsoft Endpoint Components Using Malicious EndpointDlp.dll

Langflow RCE Vulnerability Exploited to Deploy Monero Cryptominer on Exposed AI Servers

Critical Dell Wyse Management Suite Vulnerabilities Let Attackers Execute Remote Code

Agentic Red-Team Tools Flaws Let Hackers Steal API Keys, Escape Sandboxes, and ...

ShinyHunters Exploits Oracle PeopleSoft Zero-Day, 100+ Orgs Hit

Marimo Oss Python Notebook Rce From Disclosure To Exploitation In Under 10 Hours

Marimo Oss Python Notebook Rce From Disclosure To Exploitation In Under 10 Hours

Langflow Exploited to Steal AWS Keys and Deploy NATS Worker | Let's Data Science

Langflow CVE-2026

Langflow CVE-2026-33017 Exploited to Steal AWS Keys, Deploy NATS Worker

TeamPCP Supply Chain Campaign: Update 002 - Telnyx PyPI Compromise, Vect Ransomware Mass Affiliate Program, and First Named Victim Claim, (Fri, Mar 27th)

Critical Langflow RCE vulnerability exploited within 20 hours | news

CVE-2026-33017: CWE-94: Improper Control of Generation of Code ('Code Injection') in ...

Critical Langflow RCE vulnerability exploited within 20 hours | news

CVE-2026-33017

Related Entities