CVE-2025-3248-Langflow-RCE

CVE-2025-3248 — Langflow 인증되지 않은 원격 코드 실행 CVE-2025-3248 에 대한 개념 증명PoC 익스플로잇으로, AI/LLM 워크플로우 구축 플랫폼인 Langflow의 인증되지 않은 원격 코드 실행 취약점입니다. 영향받는 버전: Langflow 1.3.0 수정된 버전: 1.3.0 취약점 분류: 인증되지 않은 RCE CWE-94, 코드 인젝션 상태: 봇넷에 의해 실제 환경에서 악용되는 것이 관찰된 후 CISA의 알려진 악용 취약점 카탈로그에 추가됨. 근본 원인 Langflow는 UI예: 사용자 정의...

exposecheck

EXPOSECHECK 자신이 소유하거나 테스트를 승인받은 서버에서만 실행하세요. 범위: 통과 결과는 이 좁은 검사가 인증 챌린지와 CVE-2025-3248에 대한 패치 기준 이상의 Langflow 버전을 발견했음을 의미할 뿐입니다. 이는 일반적인 보안, 평판, 구성 또는 손상 여부에 대한 판단이 아닙니다. CVE-2025-3248과 관련된 Langflow 노출에 대한 작은 방어적 자체 점검 도구입니다. EXPOSECHECK에 하나의 기본 URL자체 서버 또는 localhost을 제공하면 다음을 보고합니다: 서버가 HTTP 응답...

CVE-2026-9198

CVE-2026-9198 취약점 원인： IBM Langflow OSS는 Agent 자동화 워크플로우를 구축하고 배포하기 위한 오픈소스 소프트웨어입니다 IBM Langflow OSS 1.0.0 1.10.0은 기본적으로 자동 로그인（autologin이 true）이 활성화되어 있습니다 이 모드에서 /api/v1/autologin 엔드포인트에 접근하면 슈퍼유저 토큰이 직접 반환됩니다 이 토큰을 사용하여 /api/v1/validate/code 엔드포인트에 접근할 수 있습니다 POST /api/v1/validate/code는 검증...

CVE-2026-8481

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

CVE-2026-8481 Remote Code Execution via Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

EUVD-2026-45275

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

CVE-2026-8481 Remote Code Execution via Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

CVE-2026-7873 Code Injection Vulnerability in Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement...

CVE-2026-6543 Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables API keys, DB credentials, modifying files, or launching further attacks on the internal netwo...

CVE-2026-6543

CVE-2026-6543 affects IBM Langflow (OSS 1.0.0–1.8.4 and Desktop 1.0.0–1.8.4). The root cause is unsafe use of Python’s exec() in the code validation endpoint (validate_code) which fails to account for decorators, enabling an authenticated attacker to trigger arbitrary code execution with the Lang...

Security Bulletin: Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint

Summary IBM Langflow Desktop contains a vulnerability in its code validation functionality where the /api/v1/validate/code endpoint uses Python's exec to process user-supplied input and fails to account for decorator execution during function definition parsing, allowing authenticated attackers t...

GHSA-4GV9-MP8M-592R Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)

This vulnerability was discovered by researchers at Check Point. We are sharing this report as part of a responsible disclosure process and are happy to assist in validation and remediation if needed. Summary A privilege escalation vulnerability exists in Langflow containers where an authenticate...

Authentication Bypass

github.com/hashicorp/vault is vulnerable to authentication bypass. The vulnerability is due to the TOTP Secrets Engine code validation endpoint allowing code reuse within its validity period, which allows an attacker to replay a previously valid code to gain unauthorized access...