0xgh057r3c0n/CVE-2025-3248

PoC

Exploit for Langflow AI Remote Code Execution (Unauthenticated)

view exploit source poc_in_githubauthor 0xgh057r3c0npublished 2025-06-18catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-3248US	critical9.8OT critical	100.0% (100th)	KEV	2025-04-07
Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to e…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.