Langflow before 1.3.0 allowed unauthenticated remote code execution, per GitHub advisory

Summary

GitHub advisory GHSA-rvqx-wpfh-mfx7 (CVE-2025-3248, critical): Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint, letting a remote, unauthenticated attacker execute arbitrary code. CISA lists it as known exploited.

Techniques

Technique-level mapping, an editorial judgment made by the method.

• T1190 Exploit Public-Facing Application
• T1059 Command and Scripting Interpreter

MITRE ATT&CK technique IDs and names: © The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. ATT&CK terms of use

Controls

Controls that could prevent, detect, or support recovery from this kind of failure. Mappings are editorial judgments made by the method, not findings about what any party should have done.

NIST AI RMF

Not mapped. AI RMF mapping is optional for cyber incidents.

NIST SP 800-53

• SI-10 Information Input Validation
• AC-3 Access Enforcement
• SI-2 Flaw Remediation
• SC-7 Boundary Protection

Human-approval (JCR) checkpoint

not applicable

Correlated incidents

Co-occurrence, not cause: each link records something the two incidents share, as its rationale and source state. It does not say one incident caused the other. Links are written on one record; the other record shows the same link marked derived.

• AI AIA-013 Cursor agent: writing MCP config files without approval enabled code execution (CVE-2025-54135), per Cursor advisory

  same technique

  Technique-level similarity only: both describe code execution in AI-agent building or coding tooling, through an unauthenticated Langflow endpoint here and agent-written MCP config files in Cursor in AIA-013.

  Source: github.com https://github.com/cursor/cursor/security/advisories/GHSA-4cxx-hrm3-49rm

Sources

• github.com primary link checked 2026-10-31, HTTP 200
  GHSA-rvqx-wpfh-mfx7; rated critical. The advisory's publication date is not in the verified facts; the month shown is the CISA KEV listing month (added 2025-05-05) and is marked unverified.
  https://github.com/advisories/GHSA-rvqx-wpfh-mfx7
• nvd.nist.gov primary unchecked
  NVD record for CVE-2025-3248. Not content-verified: on 2026-10-31 the link checker got HTTP 403 (Cloudflare block), and with a browser user agent the page is a JavaScript app shell. Linked only; no NVD text is copied.
  https://nvd.nist.gov/vuln/detail/CVE-2025-3248

Corrections

No corrections recorded.

To report an error in this entry, see corrections.