Description
Langflow的/validate/code接口存在远程代码执行漏洞（CVE-2025-3248）。该漏洞源于系统未能对用户提交的Python代码片段实施有效的安全沙箱隔离或严格过滤机制，导致攻击者可以通过构造特殊代码注入系统命令（如使用os.system()或子进程调用函数）。此漏洞影响Langflow1.2.0及之前的所有版本，CVSS 3.1评分为9.8分（属于高危漏洞）。建议用户立即升级到最新修复版本，或者临时禁用动态代码验证功能作为缓解措施。
Langflow /validate/code 远程代码执行漏洞(CVE-2025-3248)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-3248
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/Langflow%E6%A1%86%E6%9E%B6/Langflow%E6%A1%86%E6%9E%B6%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2025-3248).md
https://cloud.tencent.com/developer/article/2627536
https://www.horizon3.ai/attack-research/disclosures/unsafe-at-any-speed-abusing-python-exec-for-unauth-rce-in-langflow-ai/
https://www.offsec.com/blog/cve-2025-3248/
https://www.exploit-db.com/exploits/52262
https://www.trendmicro.com/en_us/research/25/f/langflow-vulnerability-flodric-botnet.html
https://www.recordedfuture.com/blog/langflow-cve-2025-3248