exploit/multi/http/langflow_unauth_rce_cve_2025_3248

weaponized

Langflow AI RCE

view exploit source metasploittype exploitpublished 2025-04-09catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-3248US	critical9.8OT critical	100.0% (100th)	KEV	2025-04-07
Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to e…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.