CVE-2025-3248

KEV · ransomware Critical · CVSS 9.8

Langflow — Unauthenticated Remote Code Execution via Python code injection (exec)

CVSS: 9.8; nvd
EPSS: —
KEV: Listed; ransomware
Class: oss containerizable; CWE-306, CWE-94, CWE-306

Description

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Search profile — drives PoC discovery

Symbols /api/v1/validate/codeexecvalidate_codelangflowlangflow-basecode injection

Keywords CVE-2025-3248Langflow RCELangflow code injectionlangflow validate code endpointlangflow unauthenticated RCElangflow /api/v1/validate/code exploitlangflow exec RCE PoClangflow 1.3.0 vulnerability

Versions: < 1.3.0

Ranked PoCs (80) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

langflow-ai/langflow valid MVP

known researcher · cited in references

trickest

★ 0
tanjiti/sec_profile candidate

known researcher

trickest

★ 0
vulhub/vulhub candidate

known researcher

trickest

★ 0
Kiraly07/Demo_CVE-2025-3248 candidate

containerized

gh_search · Python

★ 2
CloudGeometry/LangBuilder candidate

containerized

trickest

★ 0
ILYESS24/langflow2.0 candidate

containerized

trickest

★ 0
adolfcg/mixtli25 candidate

containerized

trickest

★ 0
min8282/CVE-2025-3248 candidate

containerized

gh_search · Python

★ 0
seokjea/whs candidate

containerized

trickest

★ 0
xuemian168/CVE-2025-3248 needs review

recent activity

gh_search · Python

★ 9
vigilante-1337/CVE-2025-3248 needs review

recent activity

gh_search · Python

★ 2
tiemio/RCE-CVE-2025-3248 needs review

recent activity

gh_search · Python

★ 1
dennisec/CVE-2025-3248 needs review

recent activity

gh_search

★ 0
ynsmroztas/CVE-2025-3248-Langflow-RCE needs review

recent activity

gh_search · Python

★ 17
verylazytech/CVE-2025-3248 needs review

recent activity

gh_search · Python

★ 10
0-d3y/langflow-rce-exploit needs review

recent activity

gh_search · Python

★ 7
dennisec/Mass-CVE-2025-3248 needs review

recent activity

gh_search · Python

★ 3
PuddinCat/CVE-2025-3248-POC needs review

recent activity

gh_search · Python

★ 2
Praison001/CVE-2025-3248 needs review

recent activity

gh_search · Python

★ 1
Vip3rLi0n/CVE-2025-3248 needs review

recent activity

gh_search · Python

★ 1
imbas007/CVE-2025-3248 needs review

recent activity

gh_search · Python

★ 1
zapstiko/CVE-2025-3248 needs review

recent activity

gh_search · Python

★ 1
0xgh057r3c0n/CVE-2025-3248 needs review

recent activity

gh_search · Python

★ 0
drackyjr/cve-2025-3248-exploit needs review

gh_search · Python

★ 3
EQSTLab/CVE-2025-3248 needs review

gh_search · Python

★ 2
b0ySie7e/CVE-2025-3248-POC needs review

gh_search · Rust

★ 1
r0otk3r/CVE-2025-3248 needs review

gh_search · Python

★ 1
0ctf/vulhub needs review

trickest

★ 0
12-test-12/CVE-2025-3248 needs review

gh_search · Python

★ 0
Aimtech7/web-test2 needs review

trickest

★ 0
AmokNepal/langflow needs review

trickest

★ 0
AngelPalominoF/Buho-IA needs review

trickest

★ 0
AngelPalominoF/Martina-IA needs review

trickest

★ 0
Atomics-hub/exposecheck needs review

recent activity

gh_search · HTML

★ 0
B1ack4sh/Blackash-CVE-2025-3248 needs review

trickest

★ 0
Gideongideon5/langflow-agent needs review

trickest

★ 0
Health-Copilot-AI/langflow needs review

trickest

★ 0
IhorKondratenko/langflow needs review

trickest

★ 0
J1ezds/Vulnerability-Wiki-page needs review

trickest

★ 0
J4c0b-1337x007/ethical-exploit-playground needs review

trickest

★ 0
JeenAI-Team/Langflow-Jeen needs review

trickest

★ 0
JeenAI-Team/Langflow-Ngnix needs review

trickest

★ 0
JeenAI-Team/langflows_v2 needs review

trickest

★ 0
Lern0n/Lernon-POC needs review

trickest

★ 0
MatDupas/Custom-Nmap-Scripts needs review

trickest

★ 0
Pawan22104168/Langflow_UI needs review

trickest

★ 0
PuddinCat/GithubRepoSpider needs review

trickest

★ 0
Rahu7p/MyLangflow needs review

trickest

★ 0
Tetsuro-Copa/langflow needs review

trickest

★ 0
a1batr0ssG/VulhubExpand needs review

trickest

★ 0
aloewright/langflow needs review

trickest

★ 0
arsharma2005/adding-button needs review

trickest

★ 0
aryan-spanda/langflow-main needs review

trickest

★ 0
autocode07/langflow-ai__langflow.087c1a25 needs review

trickest

★ 0
autocode07/langflow-ai__langflow.b093c1fa needs review

trickest

★ 0
bambooqj/cve-2025-3248 needs review

gh_search · Python

★ 0
charlesin4g/langflow-main needs review

trickest

★ 0
codevakure/lu-edit needs review

trickest

★ 0
damonfmcmillan/langflow needs review

trickest

★ 0
eeeeeeeeee-code/POC needs review

trickest

★ 0
galgantar/langflow-cve needs review

trickest

★ 0
get-xor/coreweave-demo-2026-05 needs review

recent activity

gh_search · Python

★ 0
ill-deed/Langflow-CVE-2025-3248-Multi-target needs review

gh_search · Python

★ 0
issamjr/CVE-2025-3248-Scanner needs review

trickest

★ 0
khulnasoft-lab/AiEXEC needs review

trickest

★ 0
khulnasoft/aiexec needs review

trickest

★ 0
nebari-playground/langflow-cve-2025-3248 needs review

gh_search

★ 0
neurdev/langflow-exploit needs review

trickest

★ 0
nvn1729/advisories needs review

trickest

★ 0
oLy0/Vulnerability needs review

trickest

★ 0
packetinside/CISA_BOT needs review

trickest

★ 0
peiqiF4ck/WebFrameworkTools-5.1-main needs review

trickest

★ 0
peiqiF4ck/WebFrameworkTools-5.5 needs review

trickest

★ 0
peiqiF4ck/WebFrameworkTools-5.5-enhance needs review

trickest

★ 0
preemware/langflow-exploit needs review

trickest

★ 0
tonyistark/AIBuilder needs review

trickest

★ 0
ums91/CISA_BOT needs review

trickest

★ 0
waldirjunior/teste-context-langflow needs review

trickest

★ 0
wand3rlust/CVE-2025-3248 needs review

gh_search · Python

★ 0
zr1p3r/CVE-2025-3248 needs review

trickest

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

Affected packages

PyPI	langflow	0 → 1.3.0
PyPI	langflow-base	0 → 0.3.0

References

Status: enriched · ingested 2026-07-15T00:00:20.000Z · profiled 2026-07-15T00:30:20.000Z