CVE Intelligence

Pip Langflow-base vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Pip Langflow-base: 1 record(s), with affected versions and fixes.

CVE-2025-3248 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-94 Apr 7, 2025
Langflow Missing Authentication Vulnerability
Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.