We can't find the internet
Attempting to reconnect
CVE-2025-3248
Copied to clipboard
JSON
Langflow versions prior to 1.3.0 are susceptible to code injection in
the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary
code.
Affected
|
|
OS |
|
|
|
Version |
|---|
Metrics
|
|
OS |
|
|
|
Vector |
|---|
References
|
|
OS | URL |
|---|
