Tag archive

rce

2 articles connected to this topic.

langflow • Apr 4, 2026

CISA Warns Langflow AI Agent Platform Actively Exploited — Hackers Built Exploits in 20 Hours

CVE-2026-33017, a critical code injection flaw in the Langflow AI agent framework, was weaponized within hours of disclosure. CISA added it to KEV. Here's what OpenClaw users need to know about the accelerating AI supply-chain threat.

Security • Apr 1, 2026

CrewAI Gets Four CVEs in One Day: CERT/CC Drops a Critical Vulnerability Cluster on the 48K-Star Agent Framework

CERT/CC published four vulnerabilities in CrewAI — including a CVSS 9.6 critical RCE — that chain together through prompt injection. The flaws expose a systemic pattern: AI agent frameworks that silently downgrade security when infrastructure isn't perfect.