mitsec - CVE-2025-3248 Langflow RCE Exploit

Remote Code Execution (RCE) exploit for Langflow applications vulnerable to CVE-2025-3248.

Affected Endpoint: /api/v1/validate/code

🚀 Exploit Features

• Remote and unauthenticated RCE
• No authentication required
• Python3 one-liner script
• Colorized terminal output

🔧 Usage

python3 mitsec.py -u http://target:7860 -c "id"

🧪 Example Output

[+] Command Output:
uid=1001(langflow) gid=1001(langflow) groups=1001(langflow)

🧠 CVE Details

• CVE: CVE-2025-3248
• Type: Remote Code Execution (RCE)
• Component: Langflow backend
• Condition: Misuse of dynamic exec() in user-controlled code path

📌 ZoomEye Dork

app="Langflow"

🧑‍💻 Author

• Twitter: @ynsmroztas
• GitHub: @ynsmroztas

📜 Disclaimer

This tool is for educational and authorized security testing purposes only. Unauthorized use is prohibited.