{"schema":"vulnpedia.poc/1","cve":"CVE-2025-3248","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2025-05-05","ransomware":true},"epss":{"score":0.99993,"percentile":0.99987},"cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_unauth_rce_cve_2025_3248.rb","executable":true,"sourceId":"exploit/multi/http/langflow_unauth_rce_cve_2025_3248","description":"Langflow AI RCE","verification":"catalogued","source":"metasploit","modified":"2026-06-02 10:32:30 +0000","origins":[{"source":"metasploit","sourceId":"exploit/multi/http/langflow_unauth_rce_cve_2025_3248","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_unauth_rce_cve_2025_3248.rb"},{"source":"metasploit","sourceId":"exploit/multi/http/langflow_unauth_rce_cve_2025_3248","modified":"2026-06-02 10:32:30 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_unauth_rce_cve_2025_3248.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/58f291eee1de","executable":false,"sourceId":"58f291eee1de","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"58f291eee1de","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/58f291eee1de"}],"repositoryUrl":"https://github.com/xuemian168/CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/288fea3e2ebf","executable":false,"sourceId":"288fea3e2ebf","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"288fea3e2ebf","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/288fea3e2ebf"}],"repositoryUrl":"https://github.com/PuddinCat/CVE-2025-3248-POC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/5bba2deca1c3","executable":false,"sourceId":"5bba2deca1c3","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5bba2deca1c3","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/5bba2deca1c3"}],"repositoryUrl":"https://github.com/verylazytech/CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/cd6d4cd25599","executable":false,"sourceId":"cd6d4cd25599","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"cd6d4cd25599","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/cd6d4cd25599"}],"repositoryUrl":"https://github.com/minxxcozy/CVE-2025-3248-langflow-RCE"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/2098ab2f7185","executable":false,"sourceId":"2098ab2f7185","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"2098ab2f7185","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/2098ab2f7185"}],"repositoryUrl":"https://github.com/Praison001/CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f4d3bcf9f10f","executable":false,"sourceId":"f4d3bcf9f10f","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f4d3bcf9f10f","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/f4d3bcf9f10f"}],"repositoryUrl":"https://github.com/vigilante-1337/CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/93417d485096","executable":false,"sourceId":"93417d485096","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"93417d485096","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/93417d485096"}],"repositoryUrl":"https://github.com/Vip3rLi0n/CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/be18e792efe8","executable":false,"sourceId":"be18e792efe8","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"be18e792efe8","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/be18e792efe8"}],"repositoryUrl":"https://github.com/tiemio/RCE-CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/145490c5ce6f","executable":false,"sourceId":"145490c5ce6f","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"145490c5ce6f","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/145490c5ce6f"}],"repositoryUrl":"https://github.com/ynsmroztas/CVE-2025-3248-Langflow-RCE"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/36d353279df8","executable":false,"sourceId":"36d353279df8","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"36d353279df8","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/36d353279df8"}],"repositoryUrl":"https://github.com/imbas007/CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e3068430fa4d","executable":false,"sourceId":"e3068430fa4d","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e3068430fa4d","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/e3068430fa4d"}],"repositoryUrl":"https://github.com/zapstiko/CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/ad786ecce441","executable":false,"sourceId":"ad786ecce441","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ad786ecce441","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/ad786ecce441"}],"repositoryUrl":"https://github.com/0xgh057r3c0n/CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e7c172788c42","executable":false,"sourceId":"e7c172788c42","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e7c172788c42","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/e7c172788c42"}],"repositoryUrl":"https://github.com/0-d3y/langflow-rce-exploit"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/ee9c80f0dd42","executable":false,"sourceId":"ee9c80f0dd42","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ee9c80f0dd42","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/ee9c80f0dd42"}],"repositoryUrl":"https://github.com/dennisec/Mass-CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/631b46774fd7","executable":false,"sourceId":"631b46774fd7","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"631b46774fd7","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/631b46774fd7"}],"repositoryUrl":"https://github.com/B1ack4sh/Blackash-CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/8ae92c1bc671","executable":false,"sourceId":"8ae92c1bc671","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8ae92c1bc671","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/8ae92c1bc671"}],"repositoryUrl":"https://github.com/issamjr/CVE-2025-3248-Scanner"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/efad80d04720","executable":false,"sourceId":"efad80d04720","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"efad80d04720","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/efad80d04720"}],"repositoryUrl":"https://github.com/ill-deed/Langflow-CVE-2025-3248-Multi-target"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/3e9d384f80ee","executable":false,"sourceId":"3e9d384f80ee","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3e9d384f80ee","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/3e9d384f80ee"}],"repositoryUrl":"https://github.com/r0otk3r/CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/a72c4ca01c3d","executable":false,"sourceId":"a72c4ca01c3d","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a72c4ca01c3d","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/a72c4ca01c3d"}],"repositoryUrl":"https://github.com/min8282/CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/05d95ecf10d9","executable":false,"sourceId":"05d95ecf10d9","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"05d95ecf10d9","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/05d95ecf10d9"}],"repositoryUrl":"https://github.com/EQSTLab/CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/bc487190c5b1","executable":false,"sourceId":"bc487190c5b1","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"bc487190c5b1","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/bc487190c5b1"}],"repositoryUrl":"https://github.com/wand3rlust/CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/25e094423db0","executable":false,"sourceId":"25e094423db0","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"25e094423db0","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/25e094423db0"}],"repositoryUrl":"https://github.com/Kiraly07/Demo_CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/c8205b76d58b","executable":false,"sourceId":"c8205b76d58b","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"c8205b76d58b","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/c8205b76d58b"}],"repositoryUrl":"https://github.com/bambooqj/cve-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/684115e325db","executable":false,"sourceId":"684115e325db","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"684115e325db","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/684115e325db"}],"repositoryUrl":"https://github.com/drackyjr/cve-2025-3248-exploit"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/fe2de4ea8e83","executable":false,"sourceId":"fe2de4ea8e83","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"fe2de4ea8e83","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/fe2de4ea8e83"}],"repositoryUrl":"https://github.com/b0ySie7e/CVE-2025-3248-POC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/68b57b9315a2","executable":false,"sourceId":"68b57b9315a2","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"68b57b9315a2","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/68b57b9315a2"}],"repositoryUrl":"https://github.com/12-test-12/CVE-2025-3248"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/dbf02ebce5d9","executable":false,"sourceId":"dbf02ebce5d9","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"dbf02ebce5d9","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/dbf02ebce5d9"}],"repositoryUrl":"https://github.com/preemware/langflow-exploit"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/1b00d10ad09e","executable":false,"sourceId":"1b00d10ad09e","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1b00d10ad09e","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/1b00d10ad09e"}],"repositoryUrl":"https://github.com/hideki233/CVE-2025-3248-Langflow-RCE"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/b8547a42c70b","executable":false,"sourceId":"b8547a42c70b","verification":"catalogued","source":"vulncheck-kev","modified":"2025-04-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b8547a42c70b","modified":"2025-04-12T00:00:00Z","url":"https://vulncheck.com/xdb/b8547a42c70b"}],"repositoryUrl":"https://github.com/cpwjdgh/CVE-2025-3248-CTF-Lab"},{"kind":"exploitdb","id":"52262","url":"https://www.exploit-db.com/exploits/52262","code":"https://www.exploit-db.com/download/52262","executable":true},{"kind":"exploitdb","id":"52364","url":"https://www.exploit-db.com/exploits/52364","code":"https://www.exploit-db.com/download/52364","executable":true}],"poc_candidates":[{"url":"https://github.com/xuemian168/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"A vulnerability scanner for CVE-2025-3248 in Langflow applications. 用于扫描 Langflow 应用中 CVE-2025-3248 漏洞的工具。","modified":"2026-09-21T10:32:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/xuemian168/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-09-21T10:32:15Z","url":"https://github.com/xuemian168/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/PuddinCat/CVE-2025-3248-POC","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"POC of CVE-2025-3248, RCE of LangFlow","modified":"2026-08-16T13:14:39Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/PuddinCat/CVE-2025-3248-POC"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-08-16T13:14:39Z","url":"https://github.com/PuddinCat/CVE-2025-3248-POC"}],"tags":[]},{"url":"https://github.com/verylazytech/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2025-12-23T21:22:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/verylazytech/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2025-12-23T21:22:50Z","url":"https://github.com/verylazytech/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/GraySignal/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"Scanner and exploit for CVE-2025-3248","modified":"2025-12-01T05:34:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/GraySignal/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2025-12-01T05:34:04Z","url":"https://github.com/GraySignal/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/vigilante-1337/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"CVE-2025-3248: A critical flaw has been discovered in Langflow that allows malicious actors to execute arbitrary Python code on the target system. This can lead to full remote code execution without authentication, potentially giving attackers control over the server.","modified":"2026-05-07T06:40:24Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/vigilante-1337/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-05-07T06:40:24Z","url":"https://github.com/vigilante-1337/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/Vip3rLi0n/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"Perform Remote Code Execution using vulnerable API endpoint.","modified":"2026-04-25T21:02:25Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/Vip3rLi0n/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-04-25T21:02:25Z","url":"https://github.com/Vip3rLi0n/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/tiemio/RCE-CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"This Python script exploits CVE-2025-3248 to execute arbitrary commands or spawn a reverse shell on a vulnerable system. Authentication is required to use this exploit.","modified":"2026-03-09T19:52:52Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/tiemio/RCE-CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-03-09T19:52:52Z","url":"https://github.com/tiemio/RCE-CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/ynsmroztas/CVE-2025-3248-Langflow-RCE","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"CVE-2025-3248 Langflow RCE Exploit","modified":"2026-10-19T16:31:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/ynsmroztas/CVE-2025-3248-Langflow-RCE"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-10-19T16:31:14Z","url":"https://github.com/ynsmroztas/CVE-2025-3248-Langflow-RCE"}],"tags":[]},{"url":"https://github.com/imbas007/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-07-25T04:42:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/imbas007/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-07-25T04:42:03Z","url":"https://github.com/imbas007/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/0xgh057r3c0n/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"Exploit for Langflow AI Remote Code Execution (Unauthenticated)","modified":"2025-06-18T19:59:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/0xgh057r3c0n/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2025-06-18T19:59:16Z","url":"https://github.com/0xgh057r3c0n/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/zapstiko/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"CVE-2025-3248 — Langflow RCE Exploit","modified":"2026-09-18T01:35:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/zapstiko/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-09-18T01:35:49Z","url":"https://github.com/zapstiko/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/0-d3y/langflow-rce-exploit","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"Remote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ]","modified":"2025-12-10T21:36:25Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/0-d3y/langflow-rce-exploit"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2025-12-10T21:36:25Z","url":"https://github.com/0-d3y/langflow-rce-exploit"}],"tags":[]},{"url":"https://github.com/dennisec/Mass-CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"Mass-CVE-2025-3248","modified":"2026-08-24T14:52:48Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/dennisec/Mass-CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-08-24T14:52:48Z","url":"https://github.com/dennisec/Mass-CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/ill-deed/Langflow-CVE-2025-3248-Multi-target","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.","modified":"2025-07-27T23:44:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/ill-deed/Langflow-CVE-2025-3248-Multi-target"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2025-07-27T23:44:43Z","url":"https://github.com/ill-deed/Langflow-CVE-2025-3248-Multi-target"}],"tags":[]},{"url":"https://github.com/r0otk3r/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2025-07-13T17:17:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/r0otk3r/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2025-07-13T17:17:03Z","url":"https://github.com/r0otk3r/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/min8282/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"CVE-2025-3248","modified":"2025-09-17T08:57:34Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/min8282/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2025-09-17T08:57:34Z","url":"https://github.com/min8282/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/EQSTLab/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"Langflow Remote Code Execution","modified":"2026-08-29T01:18:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/EQSTLab/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-08-29T01:18:11Z","url":"https://github.com/EQSTLab/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/wand3rlust/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"PoC for achieving RCE in Langflow versions <1.3.0","modified":"2025-10-02T10:48:06Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/wand3rlust/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2025-10-02T10:48:06Z","url":"https://github.com/wand3rlust/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/Kiraly07/Demo_CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2025-10-01T05:57:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/Kiraly07/Demo_CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2025-10-01T05:57:37Z","url":"https://github.com/Kiraly07/Demo_CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/bambooqj/cve-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"Langflow 在对用户提交的“验证代码”做 AST 解析和编译时，在未做鉴权与沙箱限制的情况下调用了 Python 的 compile()/exec()（以及在编译阶段会评估函数默认参数与装饰器），攻击者可把恶意载荷放在参数默认值或装饰器里，借此在服务器上下文中执行任意语句（反弹 shell、下载器、横向移动等）","modified":"2026-07-26T10:08:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/bambooqj/cve-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-07-26T10:08:15Z","url":"https://github.com/bambooqj/cve-2025-3248"}],"tags":[]},{"url":"https://github.com/drackyjr/cve-2025-3248-exploit","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"A comprehensive Python exploitation framework for testing and demonstrating CVE-2025-3248, a critical unauthenticated remote code execution vulnerability in Langflow versions ≤ 1.3.0.","modified":"2026-02-13T15:54:54Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/drackyjr/cve-2025-3248-exploit"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-02-13T15:54:54Z","url":"https://github.com/drackyjr/cve-2025-3248-exploit"}],"tags":[]},{"url":"https://github.com/b0ySie7e/CVE-2025-3248-POC","source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-03-15T03:07:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/b0ySie7e/CVE-2025-3248-POC"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-03-15T03:07:50Z","url":"https://github.com/b0ySie7e/CVE-2025-3248-POC"}],"tags":[]},{"url":"https://github.com/12-test-12/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-03-29T05:56:23Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/12-test-12/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-03-29T05:56:23Z","url":"https://github.com/12-test-12/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/Atomics-hub/exposecheck","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"Defensive single-target self-check for Langflow CVE-2025-3248 exposure","modified":"2026-07-14T18:48:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/Atomics-hub/exposecheck"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-07-14T18:48:46Z","url":"https://github.com/Atomics-hub/exposecheck"}],"tags":[]},{"url":"https://github.com/preemware/langflow-exploit","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"PoC for CVE-2025-3248: unauthenticated RCE in Langflow < 1.3.0 via /api/v1/validate/code.","modified":"2026-08-10T18:01:07Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/preemware/langflow-exploit"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-08-10T18:01:07Z","url":"https://github.com/preemware/langflow-exploit"}],"tags":[]},{"url":"https://github.com/hideki233/CVE-2025-3248-Langflow-RCE","source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-09-15T22:07:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/hideki233/CVE-2025-3248-Langflow-RCE"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-09-15T22:07:17Z","url":"https://github.com/hideki233/CVE-2025-3248-Langflow-RCE"}],"tags":[]},{"url":"https://github.com/zoly-zoly/CVE-2025-3248","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"An educational reference and defensive analysis of CVE-2025-3248, a critical code injection vulnerability affecting Langflow.","modified":"2026-10-13T19:35:07Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/zoly-zoly/CVE-2025-3248"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-10-13T19:35:07Z","url":"https://github.com/zoly-zoly/CVE-2025-3248"}],"tags":[]},{"url":"https://github.com/cpwjdgh/CVE-2025-3248-CTF-Lab","source":"poc-in-github","sourceId":"CVE-2025-3248","description":"Langflow 미인증 RCE 취약점(CVE-2025-3248) 기반 경량화 웹 해킹 CTF 문제 및 PoC 실습 환경","modified":"2026-10-18T22:12:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-3248","url":"https://github.com/cpwjdgh/CVE-2025-3248-CTF-Lab"},{"source":"poc-in-github","sourceId":"CVE-2025-3248","modified":"2026-10-18T22:12:14Z","url":"https://github.com/cpwjdgh/CVE-2025-3248-CTF-Lab"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2025-3248 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2025-3248 && searchsploit -m 52262","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2025-3248 && searchsploit -m 52364","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2025-3248/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3248.yaml","template":"http/cves/2025/CVE-2025-3248.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2025-3248%22&type=repositories","executable":false}]}