CVE-2025-3248 — Vulnerability in langflow — CVE Details
Langflow Unauth RCE
Summary
Advisory Timeline
- First published June 17, 2025 (482 days ago).
- Last revised June 29, 2026 — 377 days after initial publication.
Remediation
Upgrade to the fixed version using your package manager.
pip install "langflow>=1.3.0"
pip install "langflow-base>=0.3.0"
After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.
Affected Packages (2)
Affects 1 ecosystem: pypi (2).
| Package | Ecosystem | Affected | Fixed In |
|---|---|---|---|
| langflow | pypi | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+249 more) | 1.3.0 |
| langflow-base | pypi | 0.0.13, 0.0.14, 0.0.15, 0.0.16 (+89 more) | 0.3.0 |
Vulnerability Classification
Common Weakness Enumeration (CWE) identifiers for this vulnerability type.
- CWE-94Code InjectionMITRE
CVSS Score Breakdown
What the CVSS (Common Vulnerability Scoring System) 9.8 score means for each attack dimension.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A
References
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-rvqx-wpfh-mfx7WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-3248ADVISORY
- https://github.com/langflow-ai/langflow/pull/6911WEB
- https://github.com/langflow-ai/langflow/commit/faac4db133de32fcb6d483fa9ff52f40ce42bdc0WEB
- https://github.com/langflow-ai/langflowPACKAGE
- https://github.com/langflow-ai/langflow/releases/tag/1.3.0WEB
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-3248WEB
- https://www.horizon3.ai/attack-research/disclosures/unsafe-at-any-speed-abusing-python-exec-for-unauth-rce-in-langflow-aiWEB
- https://www.vulncheck.com/advisories/langflow-unauthenticated-rceWEB
Frequently Asked Questions
- What is CVE-2025-3248?
- Langflow Unauth RCE This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.8/10).
- How do I check if my project is affected by CVE-2025-3248?
- CVE-2025-3248 affects langflow and langflow-base. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2025-3248 and 200,000+ other known vulnerabilities.
Severity & Exploitability
Exploitation is straightforward and causes maximum impact. Patch immediately.
Also Known As
Related CVEs
- CVE-2026-55447CRITICAL
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
- CVE-2026-8505CRITICAL
Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass
- CVE-2026-33309CRITICAL
Langflow has an Arbitrary File Write (RCE) via v2 API
- CVE-2026-48519CRITICAL
Langflow: Unauthenticated RCE in Shareable Playgrounds
- CVE-2026-33873CRITICAL
Langflow has Authenticated Code Execution in Agentic Assistant Validation
- CVE-2026-105697CRITICAL
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
- CVE-2026-21445HIGH
Langflow Missing Authentication on Critical API Endpoints
- CVE-2026-0770HIGH
Langflow affected by Remote Code Execution via validate_code() exec()
Check if you're affected
Scan your dependencies to see if this vulnerability affects your projects.
Scan Your Dependencies