Langflow lands on CISA's KEV after 20-hour exploitation.

CVE-2026-33017 is an unauthenticated RCE (CVSS ~9.8) in Langflow's public flow-build endpoint. Attackers weaponized it within 20 hours of disclosure, before any public PoC, by reverse-engineering the advisory text. Exploitation systematically exfiltrated OpenAI, Anthropic, and AWS keys. Federal remediation deadline was July 10. Only upgrading to 1.9.0+ fixes it. The lesson isn't "Langflow bad," it's that your agent orchestration platform is now a credential vault sitting on a public endpoint. Treat it like one.