CVE-2026-33017: How attackers compromised Langflow AI pipelines in 20 hours | Sysdig

Attackers weaponized a critical unauthenticated remote code execution vulnerability in Langflow AI pipelines within 20 hours of disclosure, rapidly compromising exposed instances to steal credentials and access sensitive data—demonstrating how the gap between vulnerability announcement and real-world exploitation has collapsed to mere hours.