Vulnerabilities - CISA Warns of Langflow RCE and Trivy Flaws

The Flaw

The US Cybersecurity and Infrastructure Security Agency (CISA) has recently added two critical vulnerabilities to its Known Exploited Vulnerabilities catalog. The first, CVE-2026-33017, is a code injection vulnerability in Langflow, an open-source framework used for building AI agents and workflows. This vulnerability allows unauthenticated attackers to remotely execute code on affected instances, particularly those running versions 1.8.2 and earlier. The second, CVE-2026-33634, pertains to Aqua Security’s Trivy security scanner, which has been compromised to include embedded malicious code.

The urgency of addressing these vulnerabilities cannot be overstated. Federal civilian agencies are required to mitigate these flaws by April 8 and 9, respectively. The rapid exploitation of these vulnerabilities demonstrates a significant shift in how quickly attackers can weaponize newly disclosed security flaws.

What's at Risk

CVE-2026-33017 was publicly disclosed on March 17, 2026, and within just 20 hours, attackers began attempting to exploit it. This alarming speed indicates a serious evolution in the threat landscape, where the time between vulnerability disclosure and active exploitation has drastically shortened. Sysdig's Threat Research Team observed that attackers were able to develop working exploits directly from the advisory description, highlighting the risks associated with delayed patching practices.

On the other hand, CVE-2026-33634 has been linked to a supply chain compromise that allowed attackers to manipulate Trivy’s releases. This incident has broader implications, as it not only affects users of Trivy but also potentially compromises software packages relying on it, such as LiteLLM, which is present in 36% of monitored cloud environments. The ramifications of such compromises can lead to unauthorized access to sensitive data and systems.

Patch Status

Both vulnerabilities have been confirmed, with CISA urging immediate action. Aqua Security has outlined remediation steps for users affected by the Trivy compromise. Meanwhile, organizations using Langflow must prioritize patching to prevent unauthorized access. The swift exploitation of CVE-2026-33017 serves as a wake-up call for organizations that rely on traditional patch cycles, emphasizing the need for real-time detection and rapid response capabilities.

Immediate Actions

Organizations must act quickly to address these vulnerabilities. Here are some recommended actions:

• Update Langflow to the latest version to mitigate CVE-2026-33017.
• Review and remediate any instances of Trivy that may have been compromised.
• Implement runtime detection and network segmentation to limit exposure to potential exploits.
• Enhance incident response capabilities to ensure quick action against emerging threats.

The evolving threat landscape requires organizations to adapt swiftly. As attackers become more adept at exploiting vulnerabilities, the need for proactive security measures has never been more critical.