CRITICALVulnerability
Global

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

·Source: The Hacker News

Updated:

Executive Summary

Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner. The activity has been found to weaponize CVE-2026-33017 (CVSS score: 9.3), an unauthenticated remote code execution (RCE) vulnerability in Langflow, indicating threat actors are scanning and targeting exposed artificial intelligence (AI)

Analysis

Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner. The activity has been found to weaponize CVE-2026-33017 (CVSS score: 9.3), an unauthenticated remote code execution (RCE) vulnerability in Langflow, indicating threat actors are scanning and targeting exposed artificial intelligence (AI)

Indicators of Compromise (1)

CVE (1)
CVE-2026-33017
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Jun 30, 2026.

Related Threats

LOWVulnerabilityNEW

Azure Password-Spraying Attack Bypasses MFA Defenses

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/azure-password-spraying-attack-bypasses-some-mfa-defenses-image_small-4-a-32128.jpg" align=right hspace=4><b>Threat Actor Uses Deprecated OAuth 2.0 Authentication Flow</b><br>Attackers behind a password-spraying campaign targeting Microsoft Office 365 accounts have amassed dozens of victims by abusing a deprecated feature in OAuth

Bank Info Security
LOWVulnerabilityNEW

CVE-2026-13769 – Insecure file permissions in AWS CLI

<p><b>Bulletin ID:</b> 2026-049-AWS<br> <b>Scope:</b> AWS<br> <b>Content Type:</b> Important (requires attention)<br> <b>Publication Date:</b> 07/01/2026 11:45 AM PDT</p> <p><b>Description:</b></p> <p>The AWS Command Line Interface (AWS CLI) is a unified tool for managing AWS services from the command line. We identified CVE-2026-13769 in AWS CLI on Unix-like systems where the umask has not been c

CVE-2026-13769
AWS Security Bulletins
MEDIUMVulnerability

Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings

Microsoft's new Teams admin policy requires organizer approval for external AI bots, giving organizations greater visibility and control over automated participants in sensitive meetings. The post Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings appeared first on SecurityWeek .

SecurityWeek