---
id: "CVE-2025-3248"
kind: "vulnerability"
aliases: ["CVE-2025-3248"]
title: "Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint"
severity: "critical"
cvss: 9.8
epss: null
exploited: true
status: "open"
category: "ai-tooling"
products: [{"name": "Langflow Langflow", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "langflow", "fixed": ["1.3.0"], "affected": "< 1.3.0", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["ai-agents", "ai-tooling", "exploited", "langflow", "ransomware", "self-hosted"]
not_affected_if: ["auth-required", "managed-hosting"]
published_at: "2025-04-07T15:15:44+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:05+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3248", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3248", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint

Langflow, an AI workflow builder, has an unauthenticated endpoint at /api/v1/validate/code that runs code sent by the caller. An remote attacker with no account can send crafted HTTP requests to execute arbitrary code on the server and is listed as exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Langflow Langflow affected ? fixed ?
- vendor:langflow affected < 1.3.0 fixed 1.3.0

## How to check

Check whether the Langflow version in use is affected; the sources do not give the affected version range.
Request /api/v1/validate/code without credentials on your instance and see whether it responds.

## Fix

Upgrade Langflow to a version that adds authentication to /api/v1/validate/code; the sources do not name the fixed version.
If no fix is available, restrict access to the Langflow instance or stop using it, as CISA advises.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3248
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-3248

## From the sources

Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.

CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_