mitsec - CVE-2025-3248 Langflow RCE Exploit

Remote Code Execution (RCE) exploit for Langflow applications vulnerable to CVE-2025-3248.

Affected Endpoint: /api/v1/validate/code

🚀 Exploit Features

• Remote and unauthenticated RCE
• No authentication required
• Python3 one-liner script
• Colorized terminal output

🔧 Usage

python3 mitsec.py -u http://target:7860 -c "id"

🧪 Example Output

[+] Command Output:
uid=1001(langflow) gid=1001(langflow) groups=1001(langflow)

🧠 CVE Details

• : CVE-2025-3248