POC-CVE-2026-7873

Описание PoC-эксплойт для CVE-2026-7873 Использование python3 poc.py -u -name -pwd -c...

CVE-2025-3248

中文 ｜ English Langflow Vulnerability Scanner A vulnerability scanner for CVE-2025-3248 in Langflow applications. Features Scan single target or multiple targets using FOFA Execute system commands on vulnerable targets Retrieve system information Custom payload support Progress bar for FOFA scannin...

langflow-rce-exploit

Langflow RCE Exploit CVE-2025-3248 Remote Code Execution Exploit for Langflow CVE-2025-3248 Features Automatic vulnerability detection Multiple exploitation modes: Interactive shell Single command execution Reverse shell connection File upload capability Colorized user interface Multiple reverse...

POC-CVE-2026-19286

Description Proof of concept exploit code for CVE-2026-19286 Usage python3 poc.py -url -uname -pword -c...

EXPLOIT-CVE-2026-9198

CVE-2026-9198 — IBM Langflow OSS Неаутентифицированное удалённое выполнение кода Эксплойт-доказательство концепции и автономная Docker-лаборатория для CVE-2026-9198 — неаутентифицированной уязвимости удалённого выполнения кода в IBM Langflow OSS. Эксплойт связывает две конечные точки — autologin...

CVE-2026-5027

This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...

CVE-2025-3248

CVE-2025-3248 Introduction Langflow versions prior to 1.3.0 are susceptible to unauthenticated code injection in the /api/v1/validate/code endpoint via Python exec function. This exploit establishes a reverse shell connection abusing this vulnerability. Usage Configuration git clone...

CVE-2026-33017-PoC-Reverse-Shell

CVE-2026-33017 — Эксплойт неаутентифицированного RCE в Langflow 📋 Обзор CVE-2026-33017 — это уязвимость неаутентифицированного удалённого выполнения кода RCE в Langflow версиях Данный эксплойт предназначен только для образовательных целей и авторизованного тестирования. Несанкционированный доступ...

CVE-2025-3248

CVE-2025-3248 — Langflow AI Remote Code Execution Unauthenticated Author: 0xgh057r3c0n Description This exploit targets a critical unauthenticated RCE vulnerability CVE-2025-3248 in Langflow AI. The vulnerability allows an attacker to execute arbitrary system commands on the target server via the...

CVE-2026-9198

CVE-2026-9198 Vulnerability cause: IBM Langflow OSS is an open-source software specifically used for building and deploying Agent automation workflows. IBM Langflow OSS from 1.0.0 to 1.10.0 has automatic login enabled by default autologin is true. In this mode, accessing the /api/v1/autologin...

CVE-2026-9198

CVE-2026-9198 exploit IBM Langflow I'm just uploading someone else's here once again so if you want to know the password, watch the video https://youtu.be/qoQbyAhrzKg?si=8Wogp3OHNo-0CvIQ...

Security Bulletin: Langflow OSS is affected by multiple vulnerabilities

Summary Langflow OSS is affected by multiple vulnerabilities involving code-execution restrictions, access controls, sensitive-data handling, file access, and archive processing. Depending on deployment configuration, an attacker could execute code, read or modify data without authorization,...

langflow-exploit

CVE-2025-3248 - Langflow Code Validation Endpoint RCE A proof-of-concept exploit demonstrating a remote code execution vulnerability in Langflow's code validation endpoint. This vulnerability affects Langflow versions prior to 1.3.0, allowing unauthenticated attackers to execute arbitrary code...

CVE-2025-3248-Langflow-RCE

CVE-2025-3248 — Langflow: неаутентифицированное удалённое выполнение кода Proof-of-Concept эксплойт для CVE-2025-3248 — уязвимости неаутентифицированного удалённого выполнения кода в Langflow, платформе для создания рабочих процессов на базе ИИ/LLM. Затронутые версии: Langflow 1.3.0 Исправлено в:...

POC-CVE-2026-19295

Description Proof of concept exploit code for CVE-2026-19295 Usage python3 poc.py -url -uname -pword -c...

CVE-2026-9198

🚨 CVE-2026-9198 IBM Langflow OSS Unauthenticated RCE via Auto-Login Bypass 📋 Overview CVE-2026-9198 is a critical unauthenticated Remote Code Execution RCE vulnerability in IBM Langflow OSS. This exploit chains two vulnerabilities: CVE-2026-9103 : Auto-login bypass that grants superuser JWT token...

gha-lab-9b5e3ccfbe

Автоматизированный исследовательский артефакт — не вышестоящий проект. Этот репозиторий — одноразовая лаборатория, созданная автоматизированной системой для магистерской диссертации в Université Laval по воспроизведению опубликованных уязвимостей рабочих процессов GitHub Actions. Это точный снимо...

langflow-cors-scanner

CVE-2025-34291 — Langflow Origin Validation / CORS Overview Overly permissive CORS config combined with refresh token cookie config allows credential theft. Field| Value ---|--- CVE| CVE-2025-34291 Severity| HIGH Product| Langflow CISA KEV| 2026-05-21 Attack Type| Origin Validation / CORS Auth...

CVE-2026-33017-Langflop

CVE-2026-33017 Langflow "Langflop" Unauth RCE PoC PoC for the unauthenticated buildpublictmp code-execution flaw in Langflow. It uploads a malicious component to a public flow, triggers a build, and catches a reverse shell. For authorized security testing only. Use only against systems you own or...

EUVD-2026-91119

langflow-ai langflow v1.8.4 is affected by: Directory Traversal. The impact is: Arbitrary file write outside the intended workspace or storage boundary.. The component is:...