by Kastro
Paper/Archive/CVE-2025-34291

CVE-2025-34291

Langflow Langflow — Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE

KEV · due 4 JunEPSS 93%public exploitSSVC actCVSS 9.4
critical.is priorityof 100
98
CVSS 9.4 (CNA)9.4 / 10 × 3028.2In CISA KEV+3030.0EPSS percentile 99.8.998 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.

Affected

ProductAffectedFixed inSource
Langflow≤ 1.6.9–CNA

Scores by source

VulnCheck (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: active · Automatable: no · Technical impact: total

References

exploitobsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platformrefgithub.com/langflow-ai/langflowwriteupvulncheck.com/advisories/langflow-cors-misconfiguration-to-token-hijack-and-rcewriteupcrowdsec.net/vulntracking-report/cve-2025-34291refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-34291kevcisa.gov/known-exploited-vulnerabilities-catalog