Skip to main content

Langflow CVE-2025-3248

CRITICAL
Missing Authentication for Critical Function (CWE-306)
2025-04-07 disclosure@vulncheck.com
Authentication Bypass Langflow
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

5
Analysis Generated
Mar 28, 2026 - 18:35 vuln.today
Patch released
Mar 28, 2026 - 18:35 nvd
Patch available
Added to CISA KEV
Nov 06, 2025 - 13:57 cisa
CISA KEV
PoC Detected
Nov 06, 2025 - 13:57 vuln.today
Public exploit code
CVE Published
Apr 07, 2025 - 15:15 nvd
CRITICAL 9.8

DescriptionCVE.org

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

AnalysisAI

Langflow before 1.3.0 allows unauthenticated remote code injection through the /api/v1/validate/code endpoint, enabling attackers to execute arbitrary Python code on the server without authentication.

Technical ContextAI

The CWE-306 missing authentication on /api/v1/validate/code allows anyone to submit Python code that is executed server-side. The endpoint was designed to validate LangChain component code but executes it in the process.

RemediationAI

Update to Langflow 1.3.0+. Restrict network access to Langflow. Never expose Langflow directly to the internet.

Share

CVE-2025-3248 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy