Exploit for Code Injection in Langflow CVE-2025-3248

## https://sploitus.com/exploit?id=90608206-61C7-58AC-83B7-DC53C25FD92C
# CVE-2025-3248 ![](https://img.shields.io/badge/license-MIT-blue.svg)
Remote Code Execution using vulnerable API endpoint Proof of Concept.

 Info:
- ⚠️ Use this at your own risk!
- ❓ Added option to reverse shell.
- ✅ Auto retry if validate_code is off.

## Showcase
![showcase](https://github.com/user-attachments/assets/f1749a02-acec-405c-8c21-0aa75260697b)

## Usage

    python CVE-2025-3248.py / python3 CVE-2025-3248.py

## Footprint
```
By using this tool, you agree that you are using it for educational purposes only and that you will not use it for any illegal activity.
You also agree to bear all risks associated with the use of this tool.
I will not be responsible for direct or indirect damage caused by the use of this tool.
```