A critical remote code execution vulnerability, CVE-2026-33017, exists in Langflow AI pipelines prior to version 1.9.0 that allows an unauthenticated remote attacker to execute code with full server process privileges, impacting availability, integrity, and confidentiality.
exploited
PoC
Siyuan +6
langflow
rce
cve-2026-33017
ai-pipeline
2r
2t
1c
1i
updated