# CVE-2025-3248: Langflow Unauth RCE

Source: https://junglewise.ai/threats/cve-2025-3248-langflow-missing-authentication-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-06-17. Updated: 2026-05-09  
License: CC BY 4.0 with a link back

CVE-2025-3248 · Severity: critical · CVSS 4 · Exploited in the wild · Published 2025-06-17

Langflow versions prior to 1.3.0 contain a missing authentication vulnerability in the /api/v1/validate/code endpoint. A remote, unauthenticated attacker can exploit this by sending crafted HTTP requests to perform code injection and execute arbitrary code.

Technologies: [Langflow](https://junglewise.ai/threats/technologies/langflow), [langflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-langflow), [langflow-base (PyPI)](https://junglewise.ai/threats/technologies/langflow-base). Vendors: [Langflow](https://junglewise.ai/threats/vendors/langflow), [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2025-3248 exploited in the wild?** Yes. CVE-2025-3248 is known to be exploited in the wild, first recorded on 5 May 2025. Treat it as urgent.

**How severe is CVE-2025-3248?** Critical severity, with a CVSS score of 4, published 17 June 2025.

**Which products and versions are affected?** langflow (PyPI) < 1.3.0, ECOSYSTEM:introduced=0,fixed=1.3.0; langflow-base (PyPI) < 0.3.0, ECOSYSTEM:introduced=0,fixed=0.3.0.

**Is there a fix for CVE-2025-3248?** Yes. langflow (PyPI): upgrade to 1.3.0 or later; langflow-base (PyPI): upgrade to 0.3.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2025-3248 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2025-3248?** Check whether you run Langflow, langflow (PyPI) or langflow-base (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- langflow (PyPI): upgrade to 1.3.0 or later

  ```sh
  pip install "langflow>=1.3.0"
  ```

- langflow-base (PyPI): upgrade to 0.3.0 or later

  ```sh
  pip install "langflow-base>=0.3.0"
  ```


## Affected products

- langflow-ai Langflow < 1.3.0

## Identifiers

- CVE-2025-3248
- GHSA-rvqx-wpfh-mfx7
- PYSEC-2025-36
- PYSEC-2026-380

## Timeline

- 2025-04-07: disclosed: NVD Published Date
- 2025-05-05: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
- 2025-05-05: exploited: Reported as exploited in the wild
- 2025-04-07: patched: Fixed in version 1.3.0 via pull request 6911

## Related threats

- [Langflow SSRF in URL-taking components](https://junglewise.ai/threats/langflow-ssrf-in-url-taking-components-protection-disabled-by-default-db7cac37)
- [Langflow IP spoofing in MCP configuration installation](https://junglewise.ai/threats/cve-2026-105741-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents)
- [Langflow path traversal and cross-user disclosure in MCP resources](https://junglewise.ai/threats/cve-2026-105699-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents)
- [Langflow authorization bypass in flow API endpoints](https://junglewise.ai/threats/cve-2026-105698-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents)
- [Langflow MCP stdio command injection](https://junglewise.ai/threats/cve-2026-105697-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents)