{
 "id": "AIR-2026-0995",
 "slug": "cve-2026-33475-langflow-remote-shell-injection-in-ci-cd-work",
 "title": "CVE-2026-33475: Langflow Remote Shell Injection in CI/CD Workflows",
 "summary": "Langflow repositories prior to version 1.9.0 contain an unauthenticated remote shell injection vulnerability in GitHub Actions workflows. Attackers can inject arbitrary commands via malicious branch names or pull request titles, potentially leading to supply chain compromise.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln",
  "supply_chain"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Langflow"
 ],
 "incident_date": "2026-03-24",
 "incident_date_precision": "day",
 "first_reported": "2026-03-24",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33475",
   "publisher": "NVD",
   "title": "CVE-2026-33475: Langflow is a tool for building and deploying AI-powered agents and workflows.",
   "published_at": "2026-03-24"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-33475",
  "command-injection",
  "ci-cd"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}