CVE-2025-3248 Langflow Langflow
Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.
- CVSS
- not scored
On CISA’s exploited list
Langflow Missing Authentication Vulnerability
- Added
- 2025-05-05
- Federal patch deadline
- 2025-05-26
- Ransomware use
- known