Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
CVE-2026-33017 lets attackers abuse an unauthenticated Langflow API endpoint, run Lambsys, and spread via reused SSH keys.
More info