Threat intelligence / Vulnerability
CVE-2025-3248
Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.
Vulnerability
TypeVulnerability
External ID—
First seen2025-05-05
Last seen2025-05-05
Confidence
—
Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.
Labels
CISA KEV context
Vendor / productLangflow Langflow
Added2025-05-05
Due date2025-05-26
6 recorded
Relationships
2 external