From Langflow to Monero: Inside CVE-2026-33017 Cryptominer

A new cryptocurrency-mining campaign is targeting exposed AI application infrastructure by exploiting CVE-2026-33017, an unauthenticated RCE vulnerability in Langflow. The attack begins with a single line of Python code that triggers a shell-based dropper (isp.sh), which in turn deploys a Go-based binary named lambsys. This campaign reflects a significant pivot by commodity cryptominer operators to target emerging AI pipeline tools.

The lambsys binary is a sophisticated persistence and evasion tool that disables security controls such as AppArmor, SELinux, and firewalls, while aggressively terminating rival miners. Crucially, the campaign includes an SSH-key-reuse worm that allows the malware to move laterally from a single exposed Langflow instance to any production system reachable via the victim's SSH keys or agent sockets.

This activity is linked to a lineage of Linux miners including KORKERDS and MALXMR, but uses modernized Go-based payloads. Organizations using Langflow should immediately patch to version 1.9.0 or later and audit their environment for unauthorized SSH lateral movement or the presence of hidden directories such as /var/tmp/.xlamb.