Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

The version of Langflow running on the remote host is prior to 1.3.0 and is affected by an unauthenticated code injection vulnerability. The '/api/v1/validate/code' endpoint compiles and evaluates attacker-supplied Python during 'validation' - specifically, function default-argument values and decorators are executed. A remote, unauthenticated attacker can submit crafted code whose default argument invokes exec()/eval() to execute arbitrary Python, and ultimately arbitrary operating system commands, as the Langflow service user.

Nessus confirmed the flaw non-destructively by coercing the target into performing an out-of-band callback (a DNS lookup and/or a direct socket connection) back to the Nessus scanner. No operating system commands were executed on the target.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint.
    A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.
    (CVE-2025-3248)

Langflow is vulnerable to an attack allowing an unauthenticated attacker to execute arbitrary code via a specially forged request on the '/api/v1/validate/code' endpoint. This detection is included in the AI and LLM category.

ID	Name	Product	Family	Type	Severity
334531	Langflow < 1.3.0 Unauthenticated Code Injection RCE (CVE-2025-3248) (Direct Check)	Nessus	Artificial Intelligence	Remote	critical
427886	SCA: security update for langflow, langflow-base (GHSA-rvqx-wpfh-mfx7)	Tenable Cloud Security	SCA Checks	Local	critical
427886	SCA: security update for langflow, langflow-base (GHSA-rvqx-wpfh-mfx7)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
114668	Langflow < 1.3.0 Unauthenticated Remote Code Execution	Web App Scanning	Artificial Intelligence	Check Based	critical

Detections

Analytics

CVE-2025-3248

critical

Tenable Plugins

critical

critical

critical

critical