Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
langflow-cors-scanner — Scanner: CVE-2025-34291 Langflow Origin Validation Error / CORS Misconfiguration — Python checker (CISA KEV) | Kitploit
Tools/GitHubGitHub/ridhinva/langflow-cors-scanner
Vulnerability ScannersAPI Security TestingWeb SecurityPenetration TestingMisconfiguration
GitHubridhinva/langflow-cors-scanner

langflow-cors-scanner

Scanner: CVE-2025-34291 Langflow Origin Validation Error / CORS Misconfiguration — Python checker (CISA KEV)

View Repository
12 days agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-34291 — Langflow Origin Validation / CORS

Overview

Overly permissive CORS config combined with refresh token cookie config allows credential theft.

FieldValue
CVECVE-2025-34291
SeverityHIGH
ProductLangflow
CISA KEV2026-05-21
Attack TypeOrigin Validation / CORS
Auth RequiredNone

Affected Versions

StatusVersions
❌ VulnerableLangflow versions before 1.3.5
✅ FixedFixed in Langflow 1.3.5+

Installation

root@kitploit:~
# Clone
git clone https://github.com/ridhinva/CVE-2025-34291-Langflow-Scanner.git
cd CVE-2025-34291-Langflow-Scanner

# Install deps (if any)
pip install requests

Usage

Scan Single Target

root@kitploit:~
python3 langflow_scanner.py example.com
python3 langflow_scanner.py https://192.168.1.1

Mass Scan from File

root@kitploit:~
echo "target1.com" > targets.txt
echo "target2.com" >> targets.txt
python3 langflow_scanner.py targets.txt

Show Vulnerability Info

root@kitploit:~
python3 langflow_scanner.py --info

How It Works

The scanner checks for exposed endpoints associated with this vulnerability and reports potential targets for manual verification.

References

SourceLink
CISA KEVhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog
NVD Entryhttps://nvd.nist.gov/vuln/detail/CVE-2025-34291

Disclaimer

For authorized security testing and educational purposes only. Unauthorized access is illegal.

Author

@c_y_p_h3r — Bug bounty hunter & security researcher

Download Tool
Vendor Advisory
https://security.paloaltonetworks.com/CVE202534291