Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-30 15:47 UTC
  • Importiert: 2026-07-07 11:42 UTC
  • CVSS: 9.3
  • Quelle-ID: thn_global
  • uid_hash: c9ea45a831ce3bda898bc46c0a6f408e07fc84f83f02605e6dd8fefaf8a037cf
The Hacker News

Inhalt

Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner.

The activity has been found to weaponize CVE-2026-33017 (CVSS score: 9.3), an unauthenticated remote code execution (RCE) vulnerability in Langflow, indicating threat actors are scanning and targeting exposed artificial intelligence (AI)

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-33017

CRITICAL

9.3

CRITICAL

9.3

2026-03-20

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste