by Kastro
Paper/Archive/CVE-2025-3248

CVE-2025-3248

langflow-ai langflow — Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

KEV · due 26 Mayransomware useEPSS 100%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Affected

ProductAffectedFixed inSource
langflow< 1.3.01.3.0CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refgithub.com/langflow-ai/langflow/pull/6911refgithub.com/langflow-ai/langflow/releases/tag/1.3.0exploithorizon3.ai/attack-research/disclosures/unsafe-at-any-speed-abusing-python-exec-for-unauth-rce-in-langflow-aiwriteupvulncheck.com/advisories/langflow-unauthenticated-rcerefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-3248kevcisa.gov/known-exploited-vulnerabilities-catalog