54 matches found
CVE-2025-3248
CVE-2025-3248 ★ CVE-2025-3248 Langflow RCE PoC ★ Lab Setup docker pull langflowai/langflow:1.2.0 docker run -d --name CVE-2025-3248 -p 7860:7860 langflowai/langflow:1.2.0 localhost:7860 Description Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code...
Mass-CVE-2025-3248
Langflow CVE-2025-3248 Exploit Tool Overview This tool exploits the critical Remote Code Execution RCE vulnerability CVE-2025-3248 found in Langflow versions prior to 1.3.0. The vulnerability exists in the /api/v1/validate/code endpoint which improperly executes user-supplied code without...
CVE-2025-3248
CVE-2025-3248: Langflow Unauthenticated Remote Code Execution RCE This repository contains two Python scripts: LangflowCheck.py: A scanner that checks for Langflow AI instances vulnerable to CVE-2025-3248. exploit.py: A working reverse shell exploit for vulnerable Langflow targets. Summary...
CVE-2025-3248
POC - Remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code - CVE-2025-3248 Overview Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP request...
CVE-2025-3248
CVE-2025-3248 ★ CVE-2025-3248 Langflow RCE PoC ★ Lab Setup docker pull langflowai/langflow:1.2.0 docker run -d --name CVE-2025-3248 -p 7860:7860 langflowai/langflow:1.2.0 localhost:7860 Description Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code...
Langflow-CVE-2025-3248-Multi-target
⚠️ Langflow RCE Exploit Scanner CVE-2025-3248 This Python-based scanner automates the detection of unauthenticated Remote Code Execution RCE vulnerabilities in Langflow instances via CVE-2025-3248. It uses a proof-of-concept payload that abuses the /api/v1/validate/code endpoint to execute...
CVE-2024-48061
CVE-2024-48061 Langflow vulnerable to remote code execution CVE-2024-48061 poc Usage python3 poc.py -i -p -l -lp Description This script exploits a vulnerable API endpoint at /api/v1/validate/code on the target web server. It first verifies the presence of the vulnerable path, then starts a TCP...
EXPLOIT-CVE-2026-9198
CVE-2026-9198 — IBM Langflow OSS RCE sin autenticación Prueba de concepto del exploit y un laboratorio Docker autónomo para CVE-2026-9198 , una vulnerabilidad de ejecución remota de código sin autenticación en IBM Langflow OSS. El exploit encadena dos endpoints — autologin que entrega un token...
CVE-2025-3248
CVE-2025-3248 Introduction Langflow versions prior to 1.3.0 are susceptible to unauthenticated code injection in the /api/v1/validate/code endpoint via Python exec function. This exploit establishes a reverse shell connection abusing this vulnerability. Usage Configuration git clone...
CVE-2025-3248
CVE-2025-3248 — Langflow AI Remote Code Execution Unauthenticated Author: 0xgh057r3c0n Description This exploit targets a critical unauthenticated RCE vulnerability CVE-2025-3248 in Langflow AI. The vulnerability allows an attacker to execute arbitrary system commands on the target server via the...
CVE-2026-0770
🚀 CVE-2026-0770 – PoC de RCE execglobal en Langflow Vulnerabilidad de ejecución remota de código en Langflow 📌 Software afectado Esta vulnerabilidad afecta a: Langflow 🧠 Resumen de la vulnerabilidad CVE-2026-0770 es una vulnerabilidad de ejecución remota de código RCE en el endpoint:...
CVE-2025-3248
CVE-2025-3248 Langflow es una plataforma low-code utilizada principalmente para construir y desplegar agentes de IA y flujos de trabajo. Simplifica el proceso de desarrollo al proporcionar una interfaz visual para crear aplicaciones complejas de IA, incluidos chatbots, sistemas RAG Generación...
CVE-2026-0770
CVE-2026-0770 Resumen Esta herramienta se utiliza para probar la vulnerabilidad CVE-2026-0770 en la aplicación Langflow. Aprovecha el endpoint /api/v1/validate/code para realizar ejecución remota de código RCE. Desarrollador: Ohang Agradecimientos a: @C4p333 Propósito: Investigación de seguridad ...
CVE-2025-3248
CVE-2025-3248 — Langflow RCE Exploit Remote Code Execution RCE exploit for Langflow applications vulnerable to CVE-2025-3248. Affected Endpoint: /api/v1/validate/code 🚀 Exploit Features 🔓 Remote & unauthenticated RCE 🔐 No authentication required 🐍 Python3 one-liner script 🎨 Colorized terminal...
CVE-2025-3248-Langflow-RCE
mitsec - CVE-2025-3248 Langflow RCE Exploit Remote Code Execution RCE exploit for Langflow applications vulnerable to CVE-2025-3248. Affected Endpoint: /api/v1/validate/code 🚀 Exploit Features Remote and unauthenticated RCE No authentication required Python3 one-liner script Colorized terminal...
CVE-2025-3248-POC
Langflow RCE Exploit - CVE-2025-3248 ⚠️ Disclaimer This code is strictly intended for educational and research purposes only. Unauthorized use on systems without explicit permission may constitute a violation of the law. The author is not responsible for any misuse or malicious activity involving...
Langflow 1.10.0 - RCE
Exploit Title: Langflow 1.10.0 - RCE Exploit Author: Richard Howe Vendor Homepage: https://www.langflow.org/ Software Link: https://www.langflow.org/desktop Version: str: endpoint = '/api/v1/autologin' headers = 'Content-Type': 'application/json', try: resp = getbaseurl + endpoint except Exceptio...
PT-2026-84537
Name of the Vulnerable Software and Affected Versions WWBN AVideo affected versions not specified Description A path traversal issue exists in the 'get api login code' API endpoint. Unauthenticated attackers can delete arbitrary .log files by providing directory traversal sequences in the code...
CVE-2026-38468
A SQL injection vulnerability exists in the country-code lookup endpoint of GazellePW (GazellePosterWall) , specifically in commit 86c4bedf727691b5a97af42a4864869d18446449 . Remote authenticated users possessing users_view_ips privileges can execute arbitrary SQL commands by sending a crafted req...
