AIThe Hacker Newsabout 3 hours ago
Langflow RCE Exploit Deploys Monero Miner
1 min read
Threat actors exploit CVE-2026-33017, a critical unauthenticated RCE vulnerability in Langflow, to deploy a Monero cryptocurrency miner. The attack runs a Python script that downloads a shell script, fetches a miner binary, and launches it detached. The malware terminates competing miners, disables security controls, and spreads via SSH keys.
Level
Hype check
Tap to vote and see what everyone thinks.
