CVE-2026-33017 Langflow Unauthenticated RCE via /api/v1/build_public_tmp Python Code Injection

Ibrahim Saud@tektrix

•updated Jun 26, 2026•1•0•9

Detects exploitation attempts against Langflow targeting unauthenticated API endpoints (/api/v1/build_public_tmp or /run) for remote code execution, as well as downstream process spawning activity on Linux hosts where Python processes execute shell commands (e.g., curl/wget piping to sh) to download known malicious dropper payloads.