Exploit for Langflow AI Remote Code Execution (Unauthenticated)
A comprehensive Python exploitation framework for testing and demonstrating CVE-2025-3248, a critical unauthenticated remote code execution vulnerability in Langflow versions ≤ 1.3.0.
Langflow Remote Code Execution
Proof-of-concept exploit for CVE-2025-3248, an unauthenticated remote code execution vulnerability in Langflow, demonstrating code injection via the /api/v1/validate/code endpoint.
Python-based exploit for CVE-2025-3248 enabling remote code execution on vulnerable Langflow instances. Supports single URL and bulk scanning with automatic vulnerability detection and command execution.
PoC for CVE-2025-3248: unauthenticated RCE in Langflow < 1.3.0 via /api/v1/validate/code.
Scanner and exploit for CVE-2025-3248, an unauthenticated RCE in Langflow AI. Includes a vulnerability checker and a reverse shell payload generator for authorized security testing.
This Python script exploits CVE-2025-3248 to execute arbitrary commands or spawn a reverse shell on a vulnerable system. Authentication is required to use this exploit.
Proof-of-concept exploit for CVE-2025-3248, a remote code injection vulnerability in Langflow prior to 1.3.0. Sends crafted HTTP requests to execute arbitrary code via the /api/v1/validate/code endpoint.
CVE-2025-3248: A critical flaw has been discovered in Langflow that allows malicious actors to execute arbitrary Python code on the target system. This can lead to full remote code execution without authentication, potentially giving attackers control over the server.
PoC for achieving RCE in Langflow versions <1.3.0
A vulnerability scanner for CVE-2025-3248 in Langflow applications. 用于扫描 Langflow 应用中 CVE-2025-3248 漏洞的工具。
CVE-2025-3248 Langflow RCE Exploit
CVE-2025-3248 — Langflow RCE Exploit
Educational analysis and proof-of-concept exploit for CVE-2025-3248, a critical unauthenticated code injection vulnerability in Langflow, including mitigation guidance.
Remote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ]
Rust-based proof-of-concept exploit for CVE-2025-3248, a critical unauthenticated RCE in Langflow via /api/v1/validate/code, allowing arbitrary command execution.
POC of CVE-2025-3248, RCE of LangFlow
Perform Remote Code Execution using vulnerable API endpoint.
Exploit for CVE-2025-3248: injects crafted Python payloads into an unauthenticated API code endpoint to execute arbitrary commands on the target server.
Langflow, when performing AST parsing and compilation on user-submitted "validation code", calls Python's compile()/exec() without authentication and sandbox restrictions (and evaluates function default parameters and decorators during the compilation phase). Attackers can place malicious payloads in parameter default values or decorators to execute arbitrary statements in the server context (reverse shells, downloaders, lateral movement, etc.)
CLI tool to detect and exploit CVE-2025-3248, a critical RCE vulnerability in Langflow, with customizable payload execution for authorized penetration testing.
Exploit scanner detecting unauthenticated code injection in Langflow's /api/v1/validate/code endpoint and executing arbitrary code for authorized tests.
Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.
Educational lab simulating CVE-2025-3248 with a vulnerable Docker service and PoC exploit for hands-on security training and mitigation practice.
CVE-2025-3248
Proof-of-concept exploit for CVE-2026-9198, an unauthenticated RCE in IBM Langflow OSS, chaining auto_login and validate/code endpoints. Includes a vulnerable Docker lab for authorized testing and education.
VeryLazyTech · multiple · Apr 18, 2025
Raghad Abdallah Al-syouf · multiple · Jul 16, 2025
