CVE-2025-3248 Langflow Missing Authentication
- Exploited in the wild
- Since 5 May 2025
- Fix
- Available
What is CVE-2025-3248?
CVE-2025-3248 is a critical vulnerability in Langflow Langflow, published on 7 Apr 2025.
Official description
Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.
Which versions are affected by CVE-2025-3248?
6 open source packages ship an affected version, including langflow and langflow-base. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
langflow PyPI | All versions | 1.3.0 |
langflow PyPI | All versions | 1.3.0 |
langflow PyPI | All versions | 1.3.0 |
langflow-base PyPI | All versions | 0.3.0 |
langflow-base PyPI | All versions | 0.3.0 |
langflow-base PyPI | All versions | 0.3.0 |
Products include Langflow Langflow.
How do I fix CVE-2025-3248?
Upgrade langflow to 1.3.0 or later. US federal agencies must fix it by 26 May 2025.
Is CVE-2025-3248 being exploited?
Yes. Attackers have exploited CVE-2025-3248 in the wild since at least 5 May 2025, including in ransomware campaigns.
Public exploit code: 1 Metasploit module, 2 Exploit-DB entries, 1 Nuclei template and 28 proofs of concept on GitHub.
Other vulnerabilities in Langflow Langflow
Sources
Also known as GHSA-rvqx-wpfh-mfx7, PYSEC-2025-36, PYSEC-2026-380.