Langflow: >> Langflow >> 1.1.1 Security Vulnerabilities
CVE-2025-3248
Langflow versions prior to 1.3.0 are susceptible to code injection in
the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary
code.
Known exploited
CVSS Score
9.8
EPSS Score
0.925
Published
2025-04-07