[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":57,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":64,"vulnerability-29948":70,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":102},[4,13,23,35,43,50],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":8,"variant":12,"priority":12,"campaign_id":6},"PHP2Shell, Node2Shell, *sshole detections - pricing page","node2shell-exploit","Detect PHP2Shell, Node2Shell & *sshole with every paid plan.",null,false,[11],"\u002Fpricing","secondary",{"title":14,"slug":15,"text":16,"link":17,"external":18,"targets":19,"cta":22,"variant":12,"priority":12,"campaign_id":15},"Office Hours #15","office-hours-15","[Live Office Hours, Wed Nov 18] Behind the login, beyond the scan","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_BUp1qET2THa_5h65whpx9g",true,[20,21],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot",{"title":24,"slug":25,"text":26,"link":27,"external":9,"targets":28,"cta":34,"variant":12,"priority":12,"campaign_id":25},"*sshole, PHP2Shell & Node2Shell - HP, Vuln DB, product page","sshole-detect-exploit","🚨 Detect *sshole & Node2Shell with any paid plan. Get proof with our Sniper exploit","https:\u002F\u002Fpentest-tools.com\u002Fpricing",[29,30,31,32,33],"\u002F","\u002Fvulnerabilities-exploits","\u002Fvulnerabilities-exploits\u002Fopenssh-musl-authentication-bypass-cve-2026-123158-sshole_29981","\u002Fvulnerabilities-exploits\u002Fnode2shell-http2shell-brotli-decoder-remote-code-execution_29896","\u002Fproduct","See pricing options",{"title":36,"slug":37,"text":38,"link":27,"external":9,"targets":39,"cta":41,"variant":12,"priority":12,"campaign_id":42},"*sshole - Exploit on Sniper: Auto-Exploiter page","sshole-exploit-sniper","🚨 Exclusive exploit for *sshole now live",[40],"\u002Fexploit-helpers\u002Fsniper","Use it with the Exploit plan","sshole-exploit",{"title":44,"slug":45,"text":46,"link":27,"external":18,"targets":47,"cta":49,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - Exploit on the NS page","sshole-exploit-ns","🚨 Go beyond *sshole detection: get proof of exploitation",[48],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick the Exploit plan",{"title":51,"slug":52,"text":53,"link":27,"external":18,"targets":54,"cta":34,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - WS, free tools","sshole-exploit-mainpw","Detect *sshole with every paid plan. Prove it with Exploit.",[55,56],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffor\u002Ffree",["Island",58],{"key":59,"params":60,"result":62},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":61},"{}",{"head":63},{},["Island",65],{"key":66,"params":67,"result":68},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":61},{"head":69},{},{"id":71,"detectable_with":72,"vuln_details":78,"vuln_id":99,"name":100,"published":101,"updated":101},29948,{"tool":73,"engine":76},{"id":74,"name":75},1,"Network Scanner",{"id":74,"name":77},"Sniper",{"id":71,"codename":8,"description":79,"severity":80,"risk_description":81,"public_description":82,"public_recommendation":83,"recommendation":84,"references":85,"cvssv3":89,"epss_score":90,"epss_percentile":91,"cve":92,"in_cisa_catalog":18,"date":94,"software_type":95,"vendor":96,"product":96,"ptt_exploit_capabilities":97},"We found that the target server is vulnerable to CVE-2026-33017, an unauthenticated Remote Code Execution, affecting Langflow versions prior to 1.9.0. The root cause of this vulnerability is the existence of an unauthenticated POST \u002Fapi\u002Fv1\u002Fbuild_public_tmp\u002F{flow_id}\u002Fflow endpoint which accepts an attacker-supplied flow definition through the optional data parameter and passes its Python code to exec() during the build process without sandboxing. We managed to detect this vulnerability by confirming the exposed version is below 1.9.0 and that AUTO_LOGIN is enabled, which allows an unauthenticated attacker to mint a token, create a public flow and execute arbitrary commands through the build endpoint, reading their output from the build events response.","critical","The risk exists that a remote unauthenticated attacker can fully compromise the server in order to steal confidential information, install ransomware or pivot to the internal network.","Langflow is affected by an unauthenticated Remote Code Execution vulnerability. The root cause of this vulnerability is the existence of an unauthenticated public build endpoint that accepts externally supplied flow data. When the optional data parameter is provided, attacker-controlled flow definitions can include Python code that the application passes to exec() during the build process without proper sandboxing, allowing a remote unauthenticated attacker to execute arbitrary code on the server.","Update Langflow to version 1.9.0 or later.","We recommend to update Langflow to version 1.9.0 or later. If an immediate upgrade is not possible, restrict or disable access to the public build endpoint and apply network-level controls to block exploit payloads.",[86,87,88],"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33017","https:\u002F\u002Fthehackernews.com\u002F2026\u002F03\u002Fcritical-langflow-flaw-cve-2026-33017.html","https:\u002F\u002Fwww.sysdig.com\u002Fblog\u002Fcve-2026-33017-how-attackers-compromised-langflow-ai-pipelines-in-20-hours",9.8,0.9635,0.99879,[93],"CVE-2026-33017","2026-03-20T00:00:00Z","Low-Code AI Platform","Langflow",[98],"RCE","NETSCAN-SNIPER-CVE-2026-33017","Langflow \u003C 1.9.0 - Remote Code Execution","2026-10-25T00:00:00Z",["Island",103],{"key":104,"params":105,"result":107},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":106},"{\"text-color\":\"gray\"}",{"head":108},{}]