CVE-2025-3248-Langflow-RCE

CVE-2025-3248 — Langflow 未认证远程代码执行 针对 CVE-2025-3248 的概念验证漏洞利用程序，该漏洞是 Langflow（一个 AI/LLM 工作流构建平台）中的未认证远程代码执行漏洞。 受影响版本： Langflow 1.3.0 修复版本： 1.3.0 漏洞类型： 未认证 RCE（CWE-94，代码注入） 状态： 在被观察到被僵尸网络在野外利用后，已加入 CISA 已知被利用漏洞目录。 根本原因 Langflow 暴露了一个端点 POST /api/v1/validate/code，旨在“验证”由 UI 提交的 Python...

exposecheck

EXPOSECHECK 自分が所有している、またはテストを許可されているサーバーのみで実行してください。 範囲: 合格結果は、この狭いチェックが、認証チャレンジと、CVE-2025-3248のパッチ適用済みしきい値以上のLangflowバージョンを検出したことのみを意味します。これは一般的なセキュリティ、評判、設定、または侵害の判定ではありません。 CVE-2025-3248に関連するLangflowの露出に対する小さな防御的な自己チェックです。EXPOSECHECKに1つのベースURL（自分のサーバーまたはlocalhost）を指定すると、以下を報告します。...

CVE-2026-9198

CVE-2026-9198 漏洞原因： IBM Langflow OSS是一个专门用于构建和部署Agent自动化工作流的开源软件 IBM Langflow OSS 1.0.0 到 1.10.0默认开启了自动登录（autologin 为true） 这个模式下访问/api/v1/autologin端点会直接返还超级用户token令牌 使用这个令牌可以访问/api/v1/validate/code端点 POST /api/v1/validate/code这是一个验证端点，但会对提交的源代码中的每个函数定义validatecode进行编译和exec 验证...

CLEANSTART-2026-RG79000 Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period

Security vulnerability affects the vault package. Vault and Vault Enterprise’s “Vault” TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period...

CVE-2026-8481

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

CVE-2026-8481 Remote Code Execution via Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

CVE-2026-8481 Remote Code Execution via Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

EUVD-2026-45275

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

CVE-2026-7873 Code Injection Vulnerability in Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement...

CVE-2026-6543 Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables API keys, DB credentials, modifying files, or launching further attacks on the internal netwo...

CVE-2026-6543

CVE-2026-6543 affects IBM Langflow (OSS 1.0.0–1.8.4 and Desktop 1.0.0–1.8.4). The root cause is unsafe use of Python’s exec() in the code validation endpoint (validate_code) which fails to account for decorators, enabling an authenticated attacker to trigger arbitrary code execution with the Lang...

Security Bulletin: Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint

Summary IBM Langflow Desktop contains a vulnerability in its code validation functionality where the /api/v1/validate/code endpoint uses Python's exec to process user-supplied input and fails to account for decorator execution during function definition parsing, allowing authenticated attackers t...

GHSA-4GV9-MP8M-592R Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)

This vulnerability was discovered by researchers at Check Point. We are sharing this report as part of a responsible disclosure process and are happy to assist in validation and remediation if needed. Summary A privilege escalation vulnerability exists in Langflow containers where an authenticate...

Authentication Bypass

github.com/hashicorp/vault is vulnerable to authentication bypass. The vulnerability is due to the TOTP Secrets Engine code validation endpoint allowing code reuse within its validity period, which allows an attacker to replay a previously valid code to gain unauthorized access...

CVE-2025-6014: Improper Neutralization of Whitespace

Vault and Vault Enterprise’s “Vault” TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23...