CVE-2025-3248

Critical Vulnerability Discovered in Langflow

A newly discovered security vulnerability, CVE-2025-3248, has been identified in Langflow, a popular tool used for building agentic AI workflows. This vulnerability poses a severe risk, allowing attackers to gain full control of vulnerable servers without needing authentication.

The issue has been patched in Langflow 1.3.0, and all users are strongly advised to upgrade immediately to protect their environments.

Recommended mitigations are to update to Langflow versions 1.3.0, or restrict network access to it.

🔗 Langflow AI Release 1.3.0

🔗 Langflow AI Pull 6911

🔗 CVE Record Information

See the NodeZero® Platform in action

Get a Demo

Read about other CVEs

CVE-2024-23108

Fortinet FortiSIEM 2nd Order Command Injection

Read More

CVE-2023-43208

NextGen Mirth Connect Pre-Auth RCE

Read More

CVE-2023-34992

Fortinet FortiSIEM Command Injection

Read More

NodeZero® Platform

Implement a continuous find, fix, and verify loop with NodeZero

The NodeZero® platform empowers your organization to reduce your security risks by autonomously finding exploitable weaknesses in your network, giving you detailed guidance around how to priortize and fix them, and having you immediately verify that your fixes are effective.
Explore NodeZero

Recognized By