Langflow RCE & the Monero worm — one POST, a foothold across your fabric

A critical unauthenticated flaw (CVE-2026-33017) let anyone run code on internet-exposed Langflow servers with a single request — and attackers used it to plant a Monero miner and an SSH-key-reuse worm within ~20 hours of disclosure.