一个影响Langflow的关键安全漏洞在公开披露后20小时内就遭到主动利用，突显了威胁行为者将新发布漏洞武器化的速度。 该安全缺陷被追踪为CVE-2026-33017（CVSS评分：9.3），是一个缺失身份验证结合代码注入的案例，可能导致远程代码执行 ...

Threat actors have demonstrated just how quickly they operate today after exploiting a critical open source vulnerability ...

The Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are actively exploiting a critical ...

A critical security vulnerability in Langflow allows attackers to push and execute malicious code on PCs. A security patch is ...

Attackers weaponized critical RCE within hours, prompting CISA to add the flaw to its KEV catalog and set an urgent patch ...

Langflow CVE-2026-33017 exploited in 20 hours after disclosure, enabling RCE via exec(), exposing systems before patching ...

The US cybersecurity agency CISA has flagged a critical code injection flaw in Langflow, the open-source visual framework ...

Threats actors pounced on the vulnerability within hours of its disclosure, demonstrating that organizations have little time ...