FIX CARD
PRODUCT Langflow
SEVERITY CRITICAL
Langflow CVE-2026-33017 — unauthenticated RCE via public flow build
Why it matters
Your Langflow version is older than 1.9.0. A public API endpoint accepts attacker-supplied flow definitions and runs the embedded Python code with no sandbox and no login — full server compromise, including every model provider key Langflow stores. This bug was exploited in the wild within hours of disclosure.
Fix it: 2 steps
- Upgrade Langflow to 1.9.0 or later (note: 1.8.2 is NOT sufficient — it was widely misreported as patched; 1.9.0 is the remediation floor).
- Take the instance off the public IP until upgraded, and rotate any API keys stored in Langflow if it was reachable while vulnerable.
Verify it’s fixed
curl -m 5 http://127.0.0.1:7860/api/v1/version # version must be >= 1.9.0
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-33017
- https://research.jfrog.com/post/langflow-latest-version-was-not-fixed/
CVE mapping behind this card: human-verified, last checked 2026-07-29.
Not sure if your stack is exposed?
Run the free check: usually under a minute, safe read-only probes.
Scan your stack