CVE-2026-33017: Langflow Code Injection Allows Unauthenticated Public Flow Creation
What It Is — Langflow, an open‑source LLM workflow orchestration tool, contains a code‑injection flaw that lets an attacker craft and publish flows without any authentication. The vulnerability is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.
Exploitability — The flaw is exploitable via crafted HTTP requests; the NVD assigns it a CVSS v3.1 base score of 8.5 (High), indicating a serious risk of remote exploitation. No public exploit code has been released, but the vulnerability is actively being weaponised in the wild.
Affected Products — Langflow (all versions prior to the vendor‑released patch; exact version range not disclosed).
Why It Matters for Trust & Control Assurance
- Identity & Access Controls – The issue bypasses authentication, directly challenging the control objective of “enforcing authorized access to system functions.”
- Continuous Monitoring – Detecting unauthenticated flow creation requires log collection and real‑time alerting, evidence that can be presented during audits.
- Defensible Audit Trail – Demonstrating that you have enforced authentication and can prove it with immutable logs satisfies multiple framework requirements (e.g., NIST CSF 2.0 “Protect” function).
Recommended Actions
- Patch Immediately – Apply the vendor‑released fix or upgrade to the latest Langflow release.
- Enforce Authentication – Require authentication for all API endpoints and UI actions, leveraging MFA where possible.
- Log & Alert – Enable detailed request logging for flow‑creation endpoints and set up alerts for unauthenticated attempts.
- Validate Controls – Map the authentication control to the VCF “Access Management” objective and capture evidence for audit readiness.
Source: CISA KEV – CVE‑2026‑33017