Langflow RCE Vulnerability Exploited to Deploy Monero Cryptominer on Exposed AI Servers
Threat actors are actively exploiting CVE-2026-33017, a critical unauthenticated remote code execution (RCE) vulnerability in Langflow, to compromise internet-exposed AI application servers and silently deploy a customized Monero (XMR) cryptominer. Tra…