{"id":18167,"date":"2025-05-06T05:48:41","date_gmt":"2025-05-06T05:48:41","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/langflow-flaw-added-to-cisa-kev-amid-exploitation\/"},"modified":"2025-05-06T05:48:42","modified_gmt":"2025-05-06T05:48:42","slug":"langflow-flaw-added-to-cisa-kev-amid-exploitation","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/langflow-flaw-added-to-cisa-kev-amid-exploitation\/","title":{"rendered":"Langflow Flaw Added to CISA KEV Amid Exploitation"},"content":{"rendered":"\n<\/p>\n
\n

\ue802<\/i>May 06, 2025<\/span>\ue804<\/i>Ravie Lakshmanan<\/span><\/span>Cybersecurity \/ Vulnerability<\/span><\/p>\n<\/div>\n

\n
\n<\/p>\n

<\/a>\n<\/div>\n

A recent disclosure<\/a> has revealed a critical security flaw in the open-source Langflow platform, which has been added<\/a> to the Known Exploited Vulnerabilities (KEV) catalog by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), due to evidence of active exploitation.<\/p>\n

The vulnerability, identified as CVE-2025-3248<\/strong>, has a CVSS score of 9.8 out of 10.0, indicating a high level of severity.<\/p>\n

According to CISA, “Langflow contains a missing authentication vulnerability in the \/api\/v1\/validate\/code endpoint, allowing a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.”<\/p>\n

\n

\n
\n\"Cybersecurity\"
\n<\/a>
\n<\/center>\n<\/div>\n

Specifically, the endpoint improperly invokes Python’s built-in exec() function on user-supplied code without adequate authentication or sandboxing, enabling attackers to execute arbitrary commands on the server.<\/p>\n

The issue, which affects most versions of the popular tool, has been addressed in version 1.3.0<\/a>, released on March 31, 2025. Horizon3.ai is credited with discovering and reporting the flaw in February.<\/p>\n

\n
\n\"Critical
\n<\/a>\n<\/div>\n

Horizon3.ai describes the vulnerability as “easily exploitable<\/a>“, allowing unauthenticated remote attackers to gain control of Langflow servers. A proof-of-concept (PoC) exploit has been made publicly available<\/a> as of April 9, 2025, by other researchers.<\/p>\n

\n

\n
\n\"Cybersecurity\"
\n<\/a>
\n<\/center>\n<\/div>\n

Data from attack surface management platform Censys indicates<\/a> that there are 466 internet-exposed Langflow instances, with the majority concentrated in the United States, Germany, Singapore, India, and China.<\/p>\n

The current exploitation of this vulnerability in real-world attacks, including the parties involved and their motives, is unknown. Federal Civilian Executive Branch (FCEB) agencies have until May 26, 2025, to apply the necessary fixes.<\/p>\n

“CVE-2025-3248 highlights the risks of executing dynamic code without secure authentication and sandboxing measures,” Zscaler notes<\/a>. “This vulnerability serves as a critical reminder for organizations to approach code-validation features with caution, particularly in applications exposed to the internet.”<\/p>\n

\nFound this article interesting? Follow us on Twitter \uf099<\/i><\/a> and LinkedIn<\/a> to read more exclusive content we post.\n<\/div>\n<\/div>\n