Every CVE Search/ Get API key

CVE-2025-3248

Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

9.8 CriticalIn KEVPublic exploitFix available

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

100.0%Up 99.9 points since Apr 8, 2025
90%50%10%1%

What each source reports

CVE List Score used 9.8

Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Record
CVE-2025-3248
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-306
Updated
2026-11-02
EUVDEUVD-2025-10011 9.8

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Record
EUVD-2025-10011
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-c995-4fw3-j39m 9.8

Duplicate Advisory: Langflow Vulnerable to Code Injection via the `/api/v1/validate/code` endpoint

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-rvqx-wpfh-mfx7. This link is maintained to preserve external references.

Original Description

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Record
GHSA-c995-4fw3-j39m
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-94, CWE-306
Updated
2026-11-02
GitHub AdvisoriesGHSA-rvqx-wpfh-mfx7 9.3

Langflow Unauth RCE

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Record
GHSA-rvqx-wpfh-mfx7
CVSS 4.0
9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A
Weakness
CWE-94
Updated
2026-11-02
CISA KEV No score

Langflow Missing Authentication Vulnerability

Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.

Record
CVE-2025-3248
Weakness
CWE-306
Updated
2026-11-02
NVD 9.8

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Record
CVE-2025-3248
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-306, CWE-94
Updated
2026-11-02
Show 5 moreShow less
OSV 9.8

Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Record
CVE-2025-3248
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-306
Updated
2026-11-02
OSVGHSA-c995-4fw3-j39m 9.8

Duplicate Advisory: Langflow Vulnerable to Code Injection via the `/api/v1/validate/code` endpoint

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-rvqx-wpfh-mfx7. This link is maintained to preserve external references.

Original Description

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Record
GHSA-c995-4fw3-j39m
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-306, CWE-94
Updated
2026-11-02
OSVGHSA-rvqx-wpfh-mfx7 9.3

Langflow Unauth RCE

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Record
GHSA-rvqx-wpfh-mfx7
CVSS 4.0
9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A
Weakness
CWE-94
Updated
2026-11-02
OSVPYSEC-2025-36 9.8

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Record
PYSEC-2025-36
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVPYSEC-2026-380 9.3

Langflow Unauth RCE

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Record
PYSEC-2026-380
CVSS 4.0
9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
langflow
PyPI
 before 1.3.0
1.3.0
langflow-base
PyPI
 before 0.3.0
0.3.0
langflow
PyPI
 before 1.3.0, plus listed versions
0.0.310.0.320.0.330.0.400.0.44
Show 45 moreShow less
0.0.450.0.460.0.520.0.530.0.540.0.550.0.560.0.570.0.580.0.610.0.620.0.630.0.640.0.650.0.660.0.670.0.680.0.690.0.700.0.710.0.720.0.730.0.740.0.750.0.760.0.780.0.790.0.800.0.810.0.830.0.840.0.850.0.860.0.870.0.880.0.890.1.00.1.20.1.30.1.40.1.50.1.60.1.70.2.00.2.1
1.3.0
langflow-base
PyPI
 before 0.3.0, plus listed versions
0.0.130.0.140.0.150.0.160.0.17
Show 45 moreShow less
0.0.180.0.190.0.200.0.210.0.220.0.230.0.240.0.250.0.260.0.270.0.280.0.290.0.300.0.310.0.320.0.330.0.340.0.350.0.360.0.370.0.380.0.390.0.400.0.410.0.420.0.430.0.440.0.450.0.460.0.470.0.480.0.490.0.500.0.510.0.520.0.530.0.540.0.550.0.560.0.570.0.580.0.590.0.600.0.610.0.62
0.3.0

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitLangflow AI RCE2025-04-09
PoC in GitHubPuddinCat/CVE-2025-3248-POC2025-04-10
PoC in GitHubxuemian168/CVE-2025-32482025-04-10
PoC in GitHubverylazytech/CVE-2025-32482025-04-16
Exploit-DBLangflow 1.3.0 - Remote Code Execution (RCE)2025-04-18
PoC in GitHubGraySignal/CVE-2025-32482025-05-05
PoC in GitHubvigilante-1337/CVE-2025-32482025-05-13
PoC in GitHubVip3rLi0n/CVE-2025-32482025-05-27
PoC in GitHubtiemio/RCE-CVE-2025-32482025-05-31
PoC in GitHubynsmroztas/CVE-2025-3248-Langflow-RCE2025-06-17
Show 19 moreShow less
Public exploits
SourceLinkDate
PoC in GitHub0xgh057r3c0n/CVE-2025-32482025-06-18
PoC in GitHubimbas007/CVE-2025-32482025-06-18
PoC in GitHubzapstiko/CVE-2025-32482025-06-19
PoC in GitHub0-d3y/langflow-rce-exploit2025-06-23
PoC in GitHubdennisec/Mass-CVE-2025-32482025-06-23
PoC in GitHubill-deed/Langflow-CVE-2025-3248-Multi-target2025-06-25
PoC in GitHubr0otk3r/CVE-2025-32482025-07-06
Exploit-DBLangflow 1.2.x - Remote Code Execution (RCE)2025-07-16
PoC in GitHubmin8282/CVE-2025-32482025-09-03
PoC in GitHubEQSTLab/CVE-2025-32482025-09-15
PoC in GitHubwand3rlust/CVE-2025-32482025-09-17
PoC in GitHubKiraly07/Demo_CVE-2025-32482025-10-01
PoC in GitHubbambooqj/cve-2025-32482025-10-24
PoC in GitHubdrackyjr/cve-2025-3248-exploit2025-11-20
PoC in GitHubb0ySie7e/CVE-2025-3248-POC2025-12-10
PoC in GitHub12-test-12/CVE-2025-32482026-03-16
PoC in GitHubAtomics-hub/exposecheck2026-07-14
PoC in GitHubpreemware/langflow-exploit2026-08-09
NucleiLangflow AI - Unauthenticated Remote Code Execution

History

History
RecordedChangedSources
exploitation
exploits, exploits_more
affected, exploits
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-3248 is a critical vulnerability (CVSS 9.8) in Langflow, published April 7, 2025. CISA lists it as known to be exploited, since May 5, 2025. EUVD reports exploitation since May 5, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 100.0%, the 99th percentile. Fixed in langflow 1.3.0.

References

Show 8 moreShow less
This page doesn't list everything

Left out here: 246 versions. The JSON record has them. The full exploit list has 4 more links.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open