From Langflow to Monero: Inside CVE-2026-33017 Cryptominer

A sophisticated cryptomining campaign is exploiting a critical Langflow vulnerability (CVE-2026-33017) to mass-compromise exposed AI application endpoints, deploy persistent Monero miners, and propagate laterally via SSH key reuse—showcasing how threat actors are rapidly adapting old payloads to new AI infrastructure attack surfaces.