Langflow CVE-2026-33017: CVSS 9.3 Unauthenticated RCE Exploited Within 20 Hours.

A critical Langflow flaw allows arbitrary Python code execution on any exposed instance with a single unauthenticated HTTP request. Sysdig observed active exploitation within 20 hours of the advisory — before any public exploit code existed. With 145K+ GitHub stars and many instances configured with OpenAI, Anthropic, and AWS API keys, a compromised Langflow instance enables immediate lateral movement to cloud accounts. Attackers reverse-engineered working exploits directly from the advisory.