★ CVE-2025-3248 Langflow RCE PoC ★

docker pull langflowai/langflow:1.2.0
docker run -d --name CVE-2025-3248 -p 7860:7860 langflowai/langflow:1.2.0

localhost:7860

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

git clone https://github.com/EQSTLab/CVE-2025-3248.git
cd CVE-2025-3248

python3 CVE-2025-3248.py <Target:port> <cmd>

This repository is not intended to be RCE exploit to CVE-2025-3248. The purpose of this project is to help people learn about this vulnerability, and perhaps test their own applications.

We publish CVE and malware analysis once a month. If you're interested, please follow the links below to check out our publications. https://www.skshieldus.com/eng/business/insight.do