Langflow CVE-2026-33017 Exploited to Steal AWS Keys and Deploy NATS Worker

Attackers are now abusing a fresh Langflow vulnerability to quietly steal cloud keys and turn victim systems into workers for a new NATS based botnet. This campaign shows how a single exposed AI workflow tool can become the start of large scale credential theft and cloud misuse. According to researchers, the operation centers on CVE-2026-33017,...

Read the full article at the source.