Langflow Public Build Endpoint Access (CVE-2026-33017)

Tim Peck@timpeck

•updated Mar 23, 2026•3•0•43

Detects HTTP POST requests targeting the Langflow public flow build endpoint, which is vulnerable to unauthenticated Remote Code Execution (CVE-2026-33017).