Is CVE-2025-3248 exploited in the wild?

Yes. CVE-2025-3248 is known to be exploited in the wild, first recorded on 5 May 2025. Treat it as urgent.

How severe is CVE-2025-3248?

Critical severity, with a CVSS score of 4, published 17 June 2025.

Which products and versions are affected?

langflow (PyPI) < 1.3.0, ECOSYSTEM:introduced=0,fixed=1.3.0; langflow-base (PyPI) < 0.3.0, ECOSYSTEM:introduced=0,fixed=0.3.0.

Is there a fix for CVE-2025-3248?

Yes. langflow (PyPI): upgrade to 1.3.0 or later; langflow-base (PyPI): upgrade to 0.3.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-3248 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2025-3248?

Check whether you run Langflow, langflow (PyPI) or langflow-base (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-3248: Langflow Unauth RCE

Q: Which products and versions are affected?

langflow (PyPI) < 1.3.0, ECOSYSTEM:introduced=0,fixed=1.3.0; langflow-base (PyPI) < 0.3.0, ECOSYSTEM:introduced=0,fixed=0.3.0.

Q: Is there a fix for CVE-2025-3248?

Yes. langflow (PyPI): upgrade to 1.3.0 or later; langflow-base (PyPI): upgrade to 0.3.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2025-3248 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2025-3248?

Check whether you run Langflow, langflow (PyPI) or langflow-base (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-3248 · Severity: critical · CVSS 4 · Exploited in the wild · Published 2025-06-17

Langflow versions prior to 1.3.0 contain a missing authentication vulnerability in the /api/v1/validate/code endpoint. A remote, unauthenticated attacker can exploit this by sending crafted HTTP requests to perform code injection and execute arbitrary code.

Technologies: Langflow, langflow (PyPI), langflow-base (PyPI). Vendors: Langflow, PyPI.

Quick answers

Is CVE-2025-3248 exploited in the wild?: Yes. CVE-2025-3248 is known to be exploited in the wild, first recorded on 5 May 2025. Treat it as urgent.
How severe is CVE-2025-3248?: Critical severity, with a CVSS score of 4, published 17 June 2025.
Which products and versions are affected?: langflow (PyPI) < 1.3.0, ECOSYSTEM:introduced=0,fixed=1.3.0; langflow-base (PyPI) < 0.3.0, ECOSYSTEM:introduced=0,fixed=0.3.0.
Is there a fix for CVE-2025-3248?: Yes. langflow (PyPI): upgrade to 1.3.0 or later; langflow-base (PyPI): upgrade to 0.3.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-3248 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2025-3248?: Check whether you run Langflow, langflow (PyPI) or langflow-base (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

langflow (PyPI): upgrade to 1.3.0 or later
```
pip install "langflow>=1.3.0"
```
langflow-base (PyPI): upgrade to 0.3.0 or later
```
pip install "langflow-base>=0.3.0"
```

Affected products

langflow-ai Langflow < 1.3.0

Identifiers

CVE-2025-3248
GHSA-rvqx-wpfh-mfx7
PYSEC-2025-36
PYSEC-2026-380

Timeline

2025-04-07: disclosed: NVD Published Date
2025-05-05: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
2025-05-05: exploited: Reported as exploited in the wild
2025-04-07: patched: Fixed in version 1.3.0 via pull request 6911

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.