AI Workflows Under Fire: Critical RCE and File Write Flaws Expose Langflow Servers

Security researchers disclosed two critical vulnerabilities in Langflow (≤1.8.1): CVE-2026-33017, an unauthenticated RCE in the public flow build endpoint that executes attacker-supplied code via Python exec(), and CVE-2026-33309, an authenticated arbitrary file write via multipart filename path traversal. Both allow full server compromise (file read/write, credential theft, persistent RCE) and no official patch was available at the time of the report; immediate mitigations are recommended.