CVE-2025-3248

The /api/v1/validate/code endpoint does not require authentication (CWE-306 — missing authentication) and is vulnerable to code injection (CWE-94). A remote attacker sends a crafted HTTP request to this endpoint, injecting malicious code that is subsequently executed on the server side. The absence of any access control mechanisms allows any person with network access to the application to carry out the attack.

An attacker can execute arbitrary code on the server with Langflow process privileges, which in practice means complete system takeover — data theft, malware installation, or lateral movement in the network.

Langflow must be immediately updated to version 1.3.0 or newer. The patch is available in the official GitHub project repository (tag 1.3.0). Until the update is applied, it is recommended to restrict network access to the Langflow instance to trusted IP addresses only.

Langflow versions earlier than 1.3.0

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.