https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:44:32.291121+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-3248 CVE-2025-3248 — Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code 2026-10-03T02:44:32.293669+00:00

Affected: langflow-ai langflow

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-rvqx-wpfh-mfx7 GHSA-rvqx-wpfh-mfx7 — Langflow Unauth RCE 2026-10-03T02:44:32.293739+00:00

Affected: PyPI: langflow, PyPI: langflow-base

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.