CVE-2025-3248

CVE-2025-3248: Langflow Ejecución Remota de Código RCE Sin Autenticación Este repositorio contiene dos scripts de Python: LangflowCheck.py: Un escáner que verifica instancias de Langflow AI vulnerables a CVE-2025-3248. exploit.py: Un exploit funcional de reverse shell para objetivos Langflow...

CVE-2025-3248

CVE-2025-3248 ★ CVE-2025-3248 PoC de RCE de Langflow ★ Configuración del Laboratorio root@kitploit: docker pull langflowai/langflow:1.2.0 docker run -d --name CVE-2025-3248 -p 7860:7860 langflowai/langflow:1.2.0 localhost:7860 Descripción Las versiones de Langflow anteriores a la 1.3.0 son...

CVE-2025-3248

CVE-2025-3248 – Execute arbitrary Python code on vulnerable Langflow server. Discovered by: Naveen Sunkavally, Horizon3.ai Status: Public Disclosure Date Reported: 2025-04-07 CVE ID: CVE-2025-3248 🧾 Screenshot 🧩 Summary A critical flaw has been discovered in Langflow that allows malicious actors ...

POC-CVE-2026-19286

Description Proof of concept exploit code for CVE-2026-19286 Usage python3 poc.py -url -uname -pword -c...

CVE-2025-3248

Exploit de Langflow CVE-2025-3248 Un exploit basado en Python para CVE-2025-3248, que permite a atacantes remotos no autenticados ejecutar código arbitrario en instancias vulnerables de Langflow mediante solicitudes HTTP manipuladas. Características Escaneo de URL única o masivo desde archivo...

EXPLOIT-CVE-2026-9198

CVE-2026-9198 — IBM Langflow OSS RCE sin autenticación Prueba de concepto del exploit y un laboratorio Docker autónomo para CVE-2026-9198 , una vulnerabilidad de ejecución remota de código sin autenticación en IBM Langflow OSS. El exploit encadena dos endpoints — autologin que entrega un token...

langflow-CVE-2026-33017-poc

CVE-2026-33017 — PoC de RCE no autenticada en Langflow Solo para fines educativos y pruebas autorizadas. Resumen Langflow = 1.8.1 expone un endpoint público de construcción de flujos que acepta datos de flujo controlados por el atacante y que contienen código arbitrario. Ese código se pasa a...

Langflow - Broken Access Control

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories...

Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()

Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. id: CVE-2026-0770 info: name: Langflow...

Langflow < 1.9.1 - Unauthenticated File Upload

Langflow 1.9.1 contains an unrestricted file upload caused by lack of upload limitations, letting unauthenticated attackers exhaust server space and leak absolute file paths, exploit requires network access. id: CVE-2026-55450 info: name: Langflow 1.9.1 - Unauthenticated File Upload author: xtr0n...

Langflow <= 1.8.4 - Path Traversal to RCE via File Upload

The application contains a path traversal vulnerability caused by unsanitized 'filename' parameter in the 'POST /api/v2/files' multipart form data, letting attackers write files to arbitrary filesystem locations, exploit requires crafted request. id: CVE-2026-5027 info: name: Langflow = 1.8.4 -...

Langflow < 1.9.0 - Remote Code Execution

Langflow versions prior to 1.9.0 are vulnerable to unauthenticated remote code execution RCE via the buildpublictmp endpoint. Attackers can submit a manipulated flow JSON containing Python code that is executed during the build process without proper sandboxing. id: CVE-2026-33017 info: name:...

Langflow < 1.7.0 - Path Traversal

Langflow 1.7.1 contains a path traversal caused by insufficient filtering of foldername and filename parameters in downloadprofilepicture endpoint, letting attackers read secretkey across directories, exploit requires crafted request. id: CVE-2026-33497 info: name: Langflow 1.7.0 - Path Traversal...

CVE-2026-33017

CVE-2026-33017 Langflow RCE ★ CVE-2026-33017 Langflow Remote Code Execution PoC ★ https://github.com/user-attachments/assets/562fc637-6be1-4ab9-a396-bfad56447af7 Environment Setup Use the following commands to build and run the vulnerable Langflow environment: root@kitploit: docker build -t...

Langflow-CVE-2025-3248-Multi-target

⚠️ Langflow RCE Exploit Scanner CVE-2025-3248 This Python-based scanner automates the detection of unauthenticated Remote Code Execution RCE vulnerabilities in Langflow instances via CVE-2025-3248. It uses a proof-of-concept payload that abuses the /api/v1/validate/code endpoint to execute...

CVE-2026-5027

Esta publicación es un artículo de investigación publicado por EQSTLab. Gracias aYahia Hamza, quien reportó y analizó esta vulnerabilidad. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Escritura Arbitraria de Archivos PoC ★ Descripción CVE-2026-5027: Vulnerabilidad de Escritura Arbitrar...

CVE-2025-3248

CVE-2025-3248 Introducción Las versiones de Langflow anteriores a la 1.3.0 son susceptibles a una inyección de código no autenticada en el endpoint /api/v1/validate/code a través de la función Python exec. Este exploit establece una conexión de shell inversa abusando de esta vulnerabilidad. Uso...

CVE-2026-33017-PoC-Reverse-Shell

CVE-2026-33017 - Langflow Unauthenticated RCE Exploit 📋 Overview CVE-2026-33017 is an unauthenticated Remote Code Execution RCE vulnerability in Langflow versions This exploit is for educational and authorized testing purposes only. Unauthorized access to computer systems is illegal. Use this too...

CVE-2025-3248

CVE-2025-3248 — Langflow AI 远程代码执行（未认证） 作者： 0xgh057r3c0n 描述 该漏洞利用程序针对 Langflow AI 中的一个严重未认证远程代码执行漏洞（CVE-2025-3248）。该漏洞允许攻击者通过 /api/v1/validate/code 端点在目标服务器上执行任意系统命令。 此概念验证（PoC）工具提供了一个交互式 shell，用于测试和演示该问题。 前提条件 Python 3.8 或更高版本 pip3 用于安装依赖项 安装 1. 克隆仓库 root@kitploit: git clone...

CVE-2026-9198

CVE-2026-9198 Causa de la vulnerabilidad: IBM Langflow OSS es un software de código abierto diseñado específicamente para construir y desplegar flujos de trabajo automatizados de agentes IBM Langflow OSS 1.0.0 a 1.10.0 tiene el inicio de sesión automático habilitado por defecto autologin es true ...