CVE-2025-3248 1

CVE-2025-3248: Langflow Missing Authentication Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog May 05, 2025

Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.

Vulnerabilities & Patching