Exploit for Code Injection in Langflow

CVE-2025-3248

githubexploit · 2026-09-05

Description

Code injection exploit in Langflow allowing code execution.

Entry point

Parametercode · request body

Path/api/v1/validate/code

Langflow < 1.3.0 RCE via unsafe exec in code validation endpoint

Affected Langflow versions

Langflow< 1.3.0

All known vulnerabilities by product

Langflow

CVSS 9.8 for CVE-2025-3248

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 7 file(s) in the source

EPSS Score

100.0%higher than 100.0% of all CVEs

Updated 2026-09-05

Exploit Details

Modified:2026-09-05 03:10

Last Seen:2026-09-05 03:21

Reporter:LeotheGGman

Other exploits for CVE-2025-3248

CVE-2025-3248

2026-09-04 KitPloitKITPLOIT

Langflow-CVE-2025-3248-Multi-target

2026-09-04 KitPloitKITPLOIT

CVE-2025-3248

2026-09-04 KitPloitKITPLOIT

CVE-2025-3248

2026-09-04 KitPloitKITPLOIT

CVE-2025-3248

2026-09-04 KitPloitKITPLOIT

CVE-2025-3248

2026-09-04 KitPloitKITPLOIT

Mass-CVE-2025-3248

2026-09-04 KitPloitKITPLOIT

cve-2025-3248-exploit

2026-09-04 KitPloitKITPLOIT

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=9C7C1947-55B5-586B-AF60-04924221CB12
No description provided

Exploit Code

Share

Share on social media: