Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-3248 — Exploit for Langflow AI Remote Code Execution (Unauthenticated) | Kitploit
Tools/GitHubGitHub/0xgh057r3c0n/cve-2025-3248
ExploitationWeb Application ExploitationPenetration TestingLearning & EducationRemote Access ToolAI Security
GitHub0xgh057r3c0n/cve-2025-3248

CVE-2025-3248

Exploit for Langflow AI Remote Code Execution (Unauthenticated)

View Repository
31 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-3248 — Langflow AI Remote Code Execution (Unauthenticated)

Author: 0xgh057r3c0n

Description

This exploit targets a critical unauthenticated RCE vulnerability (CVE-2025-3248) in Langflow AI. The vulnerability allows an attacker to execute arbitrary system commands on the target server via the /api/v1/validate/code endpoint.

This proof-of-concept (PoC) tool provides an interactive shell for testing and demonstrating the issue.

Prerequisites

  • Python 3.8 or newer
  • pip3 for installing dependencies

Installation

1. Clone the Repository

root@kitploit:~
git clone https://github.com/yourusername/CVE-2025-3248.git cd CVE-2025-3248

2. Install Python Dependencies

root@kitploit:~
pip3 install -r requirements.txt

Usage

root@kitploit:~
python3 CVE-2025-3248.py -u http://TARGET_HOST:PORT

Example

root@kitploit:~
python3 CVE-2025-3248.py -u http://127.0.0.1:7860

You will be presented with an interactive shell:

root@kitploit:~
0xgh057r3c0n@root💀$ whoami
langflow

0xgh057r3c0n@root💀$ uname -a
Linux ubuntu 5.15.0-89-generic #99~20.04.1-Ubuntu SMP ...
  • To exit: type exit or quit
  • Supports typical Linux/Unix shell commands

Notes

  • SSL verification is disabled (useful for testing self-signed certificates)
  • This PoC is for educational and authorized testing purposes only

License

This project is licensed under the MIT License — see the LICENSE file for details.

Disclaimer

This software is provided for educational and research purposes only. The author assumes no liability for any misuse of this code. Use only on systems you own or have explicit permission to test.

Download Tool