CVE-2025-3248

CRITICAL9.8Auth bypass

CISA KEVRansomwareExploitTrendingHigh EPSS

Description

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected products

langflow / langflow1.3.0
langflow-ai / langflow0 – 1.3.0

Exploits & proofs of concept

exploit-dbLangflow 1.2.x - Remote Code Execution (RCE)by Raghad Abdallah Al-syouf
exploit-dbLangflow 1.3.0 - Remote Code Execution (RCE)by VeryLazyTech
nucleiLangflow AI - Unauthenticated Remote Code Executionby nvn1729

References

PATCHhttps://github.com/langflow-ai/langflow/pull/6911
PATCHhttps://github.com/langflow-ai/langflow/releases/tag/1.3.0
MISChttps://www.horizon3.ai/attack-research/disclosures/unsafe-at-any-speed-abusing-python-exec-for-unauth-rce-in-langflow-ai/
VENDOR_ADVISORYhttps://www.vulncheck.com/advisories/langflow-unauthenticated-rce

Updated 5m ago · 8 sources