CVE-2025-3248 KEVRansomwarePublic exploit Critical · 9.8 EPSS >99.9%

Langflow Missing Authentication Vulnerability

Langflow · Langflow

Summary

Langflow versions prior to 1.3.0 contain a code injection flaw in the /api/v1/validate/code endpoint, which is also linked to missing authentication for critical functionality. A remote attacker with no authentication and no user interaction can send crafted HTTP requests to that endpoint to execute arbitrary code.

Official description · NVD

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

Breakdown

79.9 / 100

Exploited: Yes, in CISA KEV
Reports: 0
Tactics: 1/15

How an attack unfolds

Based on mappings. Select a step to see the evidence.

What they do
- Run commands on the systemT1059 · Command and Scripting InterpreterSource data95 general detection rules

First seen exploited 5 days after disclosure. Public exploit code (Metasploit) appeared 2 days after disclosure.

Disclosed7 Apr 2025day 0
Public exploit codeMetasploit9 Apr 2025+2 days
First seen exploitedVulnCheck KEV evidence12 Apr 2025+5 days
Added to CISA KEVknown ransomware use; EU database agrees5 May 2025+28 days

CISA KEV listing is when exploitation was confirmed, not necessarily the first attack.

See the family tree

2 related vulnerabilities in the same code over 11 months. The latest fix listed for langflow is 1.7.0.

Same bug familyLinked by evidence that a fix failed or the same code was patched again. Oldest first.

This CVECVE-2025-3248Langflow Missing Authentication7 Apr 2025KEV
relatedHigh
Why these are linked:
- Linked in OSV/GitHub advisoryGHSA-rvqx-wpfh-mfx7
- Linked in OSV/GitHub advisoryGHSA-vwmf-pq79-vjvx
- Linked in OSV/GitHub advisoryPYSEC-2026-379
CVE-2026-33017Langflow Code Injection20 Mar 2026KEV

Fixes in langflowPyPI package, by fixed version. Earlier and later fixes in the same package, not necessarily the same bug.

1.0.15CVE-2024-3701410 Jun 2024
1.0.19CVE-2026-5544623 Jun 2026
1.3.0CVE-2025-32487 Apr 2025KEV
1.5.1CVE-2025-5776025 Aug 2025
1.5.1CVE-2026-3404627 Mar 2026
1.7.0CVE-2025-342915 Dec 2025KEVLatest listed

techniques

1 , grouped by in kill-chain order 1

ExecutionTA0002

Command and Scripting Interpreter T1059

MITRE CTID mapping of the KEV entry · primary impact

Unauthenticated attackers have exploited this missing authentication vulnerability by sending crafted HTTP requests, allowing them to execute arbitrary code on the target Langflow server.

Lower-confidence links (1)

These come from early or generic mappings, text matching, or contradict this CVE’s details (for example a public-facing technique on a bug that needs a user to open a file). Shown for completeness.

Exploitation for Client ExecutionT1203 server-side bug exploitable without user interaction; client-execution technique does not fit

Detection

0 rules for this CVE · 95 general rules for its techniques

Rules for this CVE

0 that reference CVE-2025-3248 directly.

CVE-specific rules are not available in this build. Search SigmaHQ ↗

General rules for this CVE’s techniques

These detect the technique in general, not this specific vulnerability.

Command and Scripting InterpreterT105995 general rules

HackTool - Sliver C2 Implant Activity Patterncriticaltest
Lazarus Group Activitycriticaltest
REvil Kaseya Incident Malware Patternscriticaltest
Turla Group Lateral Movementcriticaltest
Windows Defender AMSI Trigger Detectedhighstable
Windows Defender Threat Detectedhighstable
Abusable DLL Potential Sideloading From Suspicious Locationhightest
Add Insecure Download Source To Wingethightest

All 95 on SigmaHQ ↗

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

Am I affected? What do I upgrade to?

From GitHub Security Advisories and OSV

2 packages in 1 ecosystem. Main package: langflow.

PyPIlangflowGHSA-rvqx-wpfh-mfx7 PYSEC-2025-36

Upgrade to 1.10.3 or later

Fixes this CVE and 12 other known vulnerabilities in this package (CVE-2024-37014, CVE-2025-34291, +10).

pippip install "langflow>=1.10.3"

First fixed in 1.3.0 for CVE-2025-3248.

Affected versions

If you run	Upgrade to
All versions before 1.3.0	1.10.3first fix for this CVE: 1.3.0

“Up to” means the second version is the fix and is not affected.

Other packages that bundle this code (1)

Forks, repackagings and products that include the affected code. Each has its own fixed version.

PyPIlangflow-base
Affected: All versions before 0.3.0Upgrade to 0.10.3 or later
GHSA-rvqx-wpfh-mfx7+1

Check your lockfile against all CVEs

What security researchers reported

Not named in any threat report yet

Also mentioned in 50 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

Actively_Exploited_Kev | Oct 30, 202629 Oct 2026
Actively_Exploited_Kev | Oct 29, 202628 Oct 2026
Actively_Exploited_Kev | Oct 28, 202627 Oct 2026
Actively_Exploited_Kev | Oct 27, 202626 Oct 2026
Actively_Exploited_Kev | Oct 24, 202623 Oct 2026
Actively_Exploited_Kev | Oct 23, 202622 Oct 2026
44 more on OTX

References

5 links, grouped by NVD tag

Exploitation evidence

Exploited in the wild

Listed since 5 May 2025. Federal due date 26 May 2025. Known ransomware use.

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

ENISA

Marked exploited since 5 May 2025. EUVD-2025-10011

Langflow 1.3.0 - Remote Code Execution (RCE)EDB-52262 · remote · multiple · 2025-04-18
Langflow 1.2.x - Remote Code Execution (RCE)EDB-52364 · webapps · multiple · 2025-07-16

, 30 Oct 2026

>99.9%Top 0.01%

Chance of exploitation in the next 30 days. of scored CVEs (riskier than 99.99%).

3.1

9.8Critical · 9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Priority factorsFormula

In a KEV cataloglisted in CISA KEV and VulnCheck KEV 35.0/35

Recent KEV listingadded 567 days ago 0.0/10

Known ransomware useCISA KEV and VulnCheck KEV: Known 10.0/10

EPSS percentilepercentile 0.9999 20.0/20

Threat reports0 reports 0.0/10

Public exploit code1 NVD reference tagged Exploit; 2 Exploit-DB entries; 27 PoC-in-GitHub repos; 1 Metasploit module; 1 nuclei template 5.0/5

Mentioned in OTX pulses50 pulses 3.0/3

CVSS base scorebase score 9.8 6.9/7

End-of-life productsupported or unknown 0.0

Total79.9

Record

Published: 7 Apr 2025
Modified: 8 Oct 2026
: CWE-94 Improper Control of Generation of CodeCWE-306 Missing Authentication for Critical Functionality
Elsewhere: NVD CVE.org KEV JSON

How an attack unfolds

1What they do

Exploitation timelineExploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.

Patch historyPatch historyEarlier and later CVEs in the same code, in date order. It shows when a fix was bypassed or incomplete and which version finally fixed it.

Same bug familyLinked by evidence that a fix failed or the same code was patched again. Oldest first.

Fixes in langflowPyPI package, by fixed version. Earlier and later fixes in the same package, not necessarily the same bug.

ATT&CKMITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques

ExecutionTA0002

Detection

Rules for this CVE

General rules for this CVE’s techniques

Am I affected? What do I upgrade to?

Affected versions

What security researchers reported

Also mentioned in 50 community threat pulses (AlienVault OTX)

References

Patch 1

US Government Resource 1

Third Party Advisory 2

Release Notes 1

What they do

techniques