Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-3248 — Langflow Remote Code Execution | Kitploit
Tools/GitHubGitHub/eqstlab/cve-2025-3248
Vulnerability AnalysisExploitationWeb Application ExploitationLearning & EducationLabs & Practice
GitHubeqstlab/cve-2025-3248

CVE-2025-3248

Langflow Remote Code Execution

View Repository
2411 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-3248

★ CVE-2025-3248 Langflow RCE PoC ★

Lab Setup

root@kitploit:~
docker pull langflowai/langflow:1.2.0
docker run -d --name CVE-2025-3248 -p 7860:7860 langflowai/langflow:1.2.0

localhost:7860 image

Description

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

How to use

Git clone

root@kitploit:~
git clone https://github.com/EQSTLab/CVE-2025-3248.git
cd CVE-2025-3248

Command

root@kitploit:~
python3 CVE-2025-3248.py <Target:port> <cmd>

Output

image

Disclaimer

This repository is not intended to be RCE exploit to CVE-2025-3248. The purpose of this project is to help people learn about this vulnerability, and perhaps test their own applications.

EQST Insight

We publish CVE and malware analysis once a month. If you're interested, please follow the links below to check out our publications. https://www.skshieldus.com/eng/business/insight.do

Download Tool