Skip to content
skopnix
Dossier · Vulnerability

Actively exploited · CISA KEV · NVD published 2025-04-07

CVE-2025-3248

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

  1. First PoC
  2. 418 days →Metasploit
  3. 137 days →First cited attacker

Signals

Exploited in the wild
Yesadded 2025-05-05 · due 2025-05-26 · known ransomware use. An observation, not a forecast.
EPSS · 30-day forecast
100.0%Chance of exploitation in the next 30 days, 100th percentile of all CVEs. A forecast; KEV outranks it.
CVSS · NVD · CRITICAL
9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Internet exposure
not stated by sourcesNo exposure census on this CVE's dispatches.

Exploits

31 known · links only

GitHub PoCs · by trust, then stars27

  1. ynsmroztas/CVE-2025-3248-Langflow-RCE ↗Trust ok 100

    CVE-2025-3248 Langflow RCE Exploit

    ★ 17 · created 2025-06-17

  2. xuemian168/CVE-2025-3248 ↗Trust ok 100

    A vulnerability scanner for CVE-2025-3248 in Langflow applications. 用于扫描 Langflow 应用中 CVE-2025-3248 漏洞的工具。

    ★ 11 · created 2025-04-10

  3. verylazytech/CVE-2025-3248 ↗Trust ok 100

    ★ 10 · created 2025-04-16

  4. 0-d3y/langflow-rce-exploit ↗Trust ok 100

    Remote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ]

    ★ 7 · created 2025-06-23

  5. dennisec/Mass-CVE-2025-3248 ↗Trust ok 100

    Mass-CVE-2025-3248

    ★ 3 · created 2025-06-23

  6. drackyjr/cve-2025-3248-exploit ↗Trust ok 100

    A comprehensive Python exploitation framework for testing and demonstrating CVE-2025-3248, a critical unauthenticated remote code execution vulnerability in Langflow versions ≤ 1.3.0.

    ★ 3 · created 2025-11-20

  7. EQSTLab/CVE-2025-3248 ↗Trust ok 100

    Langflow Remote Code Execution

    ★ 3 · created 2025-09-15

  8. hideki233/CVE-2025-3248-Langflow-RCE ↗Trust ok 100

    ★ 3 · created 2026-08-28

  9. PuddinCat/CVE-2025-3248-POC ↗Trust ok 100

    POC of CVE-2025-3248, RCE of LangFlow

    ★ 3 · created 2025-04-10

  10. imbas007/CVE-2025-3248 ↗Trust ok 100

    ★ 2 · created 2025-06-18

  11. Kiraly07/Demo_CVE-2025-3248 ↗Trust ok 100

    ★ 2 · created 2025-10-01

  12. vigilante-1337/CVE-2025-3248 ↗Trust ok 100

    CVE-2025-3248: A critical flaw has been discovered in Langflow that allows malicious actors to execute arbitrary Python code on the target system. This can lead to full remote code execution without authentication, potentially giving attackers control over the server.

    ★ 2 · created 2025-05-13

  13. zapstiko/CVE-2025-3248 ↗Trust ok 100

    CVE-2025-3248 — Langflow RCE Exploit

    ★ 2 · created 2025-06-19

  14. zoly-zoly/CVE-2025-3248 ↗Trust ok 100

    An educational reference and defensive analysis of CVE-2025-3248, a critical code injection vulnerability affecting Langflow.

    ★ 2 · created 2026-09-09

  15. b0ySie7e/CVE-2025-3248-POC ↗Trust ok 100

    ★ 1 · created 2025-12-10

  16. bambooqj/cve-2025-3248 ↗Trust ok 100

    Langflow 在对用户提交的“验证代码”做 AST 解析和编译时，在未做鉴权与沙箱限制的情况下调用了 Python 的 compile()/exec()（以及在编译阶段会评估函数默认参数与装饰器），攻击者可把恶意载荷放在参数默认值或装饰器里，借此在服务器上下文中执行任意语句（反弹 shell、下载器、横向移动等）

    ★ 1 · created 2025-10-24

  17. GraySignal/CVE-2025-3248 ↗Trust ok 100

    Scanner and exploit for CVE-2025-3248

    ★ 1 · created 2025-05-05

  18. preemware/langflow-exploit ↗Trust ok 100

    PoC for CVE-2025-3248: unauthenticated RCE in Langflow < 1.3.0 via /api/v1/validate/code.

    ★ 1 · created 2026-08-09

  19. r0otk3r/CVE-2025-3248 ↗Trust ok 100

    ★ 1 · created 2025-07-06

  20. tiemio/RCE-CVE-2025-3248 ↗Trust ok 100

    This Python script exploits CVE-2025-3248 to execute arbitrary commands or spawn a reverse shell on a vulnerable system. Authentication is required to use this exploit.

    ★ 1 · created 2025-05-31

  21. Vip3rLi0n/CVE-2025-3248 ↗Trust ok 100

    Perform Remote Code Execution using vulnerable API endpoint.

    ★ 1 · created 2025-05-27

  22. 0xgh057r3c0n/CVE-2025-3248 ↗Trust ok 100

    Exploit for Langflow AI Remote Code Execution (Unauthenticated)

    ★ 0 · created 2025-06-18

  23. 12-test-12/CVE-2025-3248 ↗Trust ok 100

    ★ 0 · created 2026-03-16

  24. Atomics-hub/exposecheck ↗Trust ok 100

    Defensive single-target self-check for Langflow CVE-2025-3248 exposure

    ★ 0 · created 2026-07-14

  25. ill-deed/Langflow-CVE-2025-3248-Multi-target ↗Trust ok 100

    Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

    ★ 0 · created 2025-06-25

  26. min8282/CVE-2025-3248 ↗Trust ok 100

    CVE-2025-3248

    ★ 0 · created 2025-09-03

  27. wand3rlust/CVE-2025-3248 ↗Trust ok 100

    PoC for achieving RCE in Langflow versions <1.3.0

    ★ 0 · created 2025-09-17

Fake proof-of-concept repositories have been used to deliver malware to the researchers who run them. The trust verdict is our engine's heuristic over the repository (account age, what it ships, how its stars arrived); it is a reason to read the code first, not a finding about its author.

Metasploit1

  1. Langflow AI RCE ↗

    Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

    ruby · seen 2026-10-18

Exploit-DB2

  1. Langflow 1.3.0 - Remote Code Execution (RCE) ↗

    created 2025-04-18

  2. Langflow 1.2.x - Remote Code Execution (RCE) ↗

    created 2025-07-16

Nuclei1

  1. Langflow AI - Unauthenticated Remote Code Execution ↗

    Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint.A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

    yaml · seen 2026-10-18

On the wire

0 dispatches

No dispatch on our wire has named this CVE yet.

Watch this one?

KEV additions reach Telegram and the KEV-only RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.