← fix library

CRITICAL Langflow: Langflow CVE-2026-33017 — unauthenticated RCE via public flow build

Why it matters

Your Langflow version is older than 1.9.0. A public API endpoint accepts attacker-supplied flow definitions and runs the embedded Python code with no sandbox and no login — full server compromise, including every model provider key Langflow stores. This bug was exploited in the wild within hours of disclosure.

Fix it — 2 steps

1. Upgrade Langflow to 1.9.0 or later (note: 1.8.2 is NOT sufficient — it was widely misreported as patched; 1.9.0 is the remediation floor).
2. Take the instance off the public IP until upgraded, and rotate any API keys stored in Langflow if it was reachable while vulnerable.

Verify it’s fixed

curl -m 5 http://127.0.0.1:7860/api/v1/version  # version must be >= 1.9.0

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-33017
• https://research.jfrog.com/post/langflow-latest-version-was-not-fixed/