9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
CVE-2026-33017 - Langflow Unauthenticated RCE / \ | | \ ^ / ||||| exec with no auth, no sandbox, no hope. Langflow chat.py - startflowbuild - buildgraphfromdata - Graph.frompayload - loading.py - eval.py createclass - validate.py prepareglobalscope -...
Basic Information
ID
DA9986F3-1401-5536-8ED5-86823B22F117
Published
Apr 12, 2026 at 15:44
Modified
Apr 12, 2026 at 15:45