Exploited vulnerabilitiesBriefPublic record
Langflow unauthenticated code injection (CVE-2025-3248)
Pre-auth `exec()` in `/api/v1/validate/code`.
- Disclosed
What happened (AI developer tool)
- Pre-auth `exec()` in `/api/v1/validate/code`. Fixed: 1.3.0.
- KEV: 5 May 2025. Flodrix botnet exploitation.
Live scores
Live scores
CVE-2025-3248- EPSS
- 1.000
very likely to be attacked soon - VEDAS
- 0.985
strong exploit evidence - On CISA KEV
- Yes, since 2025-05-05
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish. The vertical line is the day CISA added it to its exploited list.
Sources
- https://www.horizon3.ai/attack-research/disclosures/unsafe-at-any-speed-abusing-python-exec-for-unauth-rce-in-langflow-ai/
- https://nvd.nist.gov/vuln/detail/CVE-2025-3248
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.