Loading CVE intelligence

CVE-2025-3248

CriticalPublished

Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

Published: Apr 7, 2025
Updated: Jul 14, 2026
Assigning CNA: VulnCheck
Evidence observed: Apr 18, 2025

Primary CVSS

9.8/ 10Critical

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

100.0%

High · next 30 days

Percentile: 100.0%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Sources

30

CVE-2025-3248Exploit
Exploit for Langflow AI Remote Code Execution (Unauthenticated)
cve-2025-3248-exploitExploit
A comprehensive Python exploitation framework for testing and demonstrating CVE-2025-3248, a critical unauthenticated remote code execution vulnerability in Langflow versions ≤ 1.3.0.
CVE-2025-3248PoC
Langflow Remote Code Execution
CVE-2025-3248-Langflow-RCE

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.

Exploit

Proof-of-concept exploit for CVE-2025-3248, an unauthenticated remote code execution vulnerability in Langflow, demonstrating code injection via the /api/v1/validate/code endpoint.

CVE-2025-3248Exploit

Python-based exploit for CVE-2025-3248 enabling remote code execution on vulnerable Langflow instances. Supports single URL and bulk scanning with automatic vulnerability detection and command execution.

Langflow-RCE-CVE-2025-3248PoC

Proof-of-concept exploit for CVE-2025-3248, a remote code execution vulnerability in Langflow, demonstrating exploitation of the vulnerable endpoint.

langflow-exploitExploit

PoC for CVE-2025-3248: unauthenticated RCE in Langflow < 1.3.0 via /api/v1/validate/code.

CVE-2025-3248Exploit

Scanner and exploit for CVE-2025-3248, an unauthenticated RCE in Langflow AI. Includes a vulnerability checker and a reverse shell payload generator for authorized security testing.

RCE-CVE-2025-3248Exploit

This Python script exploits CVE-2025-3248 to execute arbitrary commands or spawn a reverse shell on a vulnerable system. Authentication is required to use this exploit.

CVE-2025-3248Exploit

Proof-of-concept exploit for CVE-2025-3248, a remote code injection vulnerability in Langflow prior to 1.3.0. Sends crafted HTTP requests to execute arbitrary code via the /api/v1/validate/code endpoint.

CVE-2025-3248Exploit

CVE-2025-3248: A critical flaw has been discovered in Langflow that allows malicious actors to execute arbitrary Python code on the target system. This can lead to full remote code execution without authentication, potentially giving attackers control over the server.

CVE-2025-3248Exploit

PoC for achieving RCE in Langflow versions <1.3.0

CVE-2025-3248Exploit

A vulnerability scanner for CVE-2025-3248 in Langflow applications. 用于扫描 Langflow 应用中 CVE-2025-3248 漏洞的工具。

CVE-2025-3248-Langflow-RCEExploit

CVE-2025-3248 Langflow RCE Exploit

CVE-2025-3248Exploit

CVE-2025-3248 — Langflow RCE Exploit

CVE-2025-3248PoC

Educational analysis and proof-of-concept exploit for CVE-2025-3248, a critical unauthenticated code injection vulnerability in Langflow, including mitigation guidance.

langflow-rce-exploitExploit

Remote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ]

CVE-2025-3248-POCExploit

Rust-based proof-of-concept exploit for CVE-2025-3248, a critical unauthenticated RCE in Langflow via /api/v1/validate/code, allowing arbitrary command execution.

CVE-2025-3248-POCPoC

POC of CVE-2025-3248, RCE of LangFlow

CVE-2025-3248Exploit

Perform Remote Code Execution using vulnerable API endpoint.

CVE-2025-3248Exploit

Exploit for CVE-2025-3248: injects crafted Python payloads into an unauthenticated API code endpoint to execute arbitrary commands on the target server.

cve-2025-3248Exploit

Langflow, when performing AST parsing and compilation on user-submitted "validation code", calls Python's compile()/exec() without authentication and sandbox restrictions (and evaluates function default parameters and decorators during the compilation phase). Attackers can place malicious payloads in parameter default values or decorators to execute arbitrary statements in the server context (reverse shells, downloaders, lateral movement, etc.)

Mass-CVE-2025-3248Exploit

CLI tool to detect and exploit CVE-2025-3248, a critical RCE vulnerability in Langflow, with customizable payload execution for authorized penetration testing.

CVE-2025-3248Exploit

Exploit scanner detecting unauthenticated code injection in Langflow's /api/v1/validate/code endpoint and executing arbitrary code for authorized tests.

Langflow-CVE-2025-3248-Multi-targetScanner

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Demo_CVE-2025-3248PoC

Educational lab simulating CVE-2025-3248 with a vulnerable Docker service and PoC exploit for hands-on security training and mitigation practice.

CVE-2025-3248Exploit

CVE-2025-3248

EXPLOIT-CVE-2026-9198Exploit

Proof-of-concept exploit for CVE-2026-9198, an unauthenticated RCE in IBM Langflow OSS, chaining auto_login and validate/code endpoints. Includes a vulnerable Docker lab for authorized testing and education.

Langflow 1.3.0 - Remote Code Execution (RCE)Exploit

VeryLazyTech · multiple · Apr 18, 2025

Langflow 1.2.x - Remote Code Execution (RCE)Exploit

Raghad Abdallah Al-syouf · multiple · Jul 16, 2025