Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
CVSS Skor
9.8
EPSS İhtimal
%100.0
Risk Skoru
19.6
Yayın
1 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
An educational reference and defensive analysis of CVE-2025-3248, a critical code injection vulnerability affecting Langflow.
hideki233/CVE-2025-3248-Langflow-RCE
PoC for CVE-2025-3248: unauthenticated RCE in Langflow < 1.3.0 via /api/v1/validate/code.
Langflow at pre-CVE-2025-3248 fix commit for variant analysis benchmarking
PoC for achieving RCE in Langflow versions <1.3.0
A comprehensive Python exploitation framework for testing and demonstrating CVE-2025-3248, a critical unauthenticated remote code execution vulnerability in Langflow versions ≤ 1.3.0.
Langflow 1.2.x - Remote Code Execution (RCE)
Langflow 1.3.0 - Remote Code Execution (RCE)
Nuclei: Langflow AI - Unauthenticated Remote Code Execution
İlgili Benzer Açıklar
Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE
Vulnerability in Langflow
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
Code injection in Langflow
Vulnerability in Langflow
Code injection in Langflow
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2025-3248"