Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint.
    A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.
    (CVE-2025-3248)

Langflow is vulnerable to an attack allowing an unauthenticated attacker to execute arbitrary code via a specially forged request on the '/api/v1/validate/code' endpoint. This detection is included in the AI and LLM category.

ID	Name	Product	Family	Severity
427886	SCA: security update for langflow, langflow-base (GHSA-rvqx-wpfh-mfx7)	Tenable Cloud Security	SCA Checks	critical
427886	SCA: security update for langflow, langflow-base (GHSA-rvqx-wpfh-mfx7)	Tenable Self-Hosted Container Security	SCA Checks	critical
114668	Langflow < 1.3.0 Unauthenticated Remote Code Execution	Web App Scanning	Artificial Intelligence	critical

Detections

Analytics

CVE-2025-3248

critical

Tenable Plugins

critical

critical

critical