How to: CVE-2025-3248 (2025-04-07)
```
Langflow versions prior to 1.3.0 are susceptible to code injection in \nthe /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary\ncode.
```
- [xuemian168/CVE-2025-3248](https://github.com/xuemian168/CVE-2025-3248)
- [PuddinCat/CVE-2025-3248-POC](https://github.com/PuddinCat/CVE-2025-3248-POC)
- [verylazytech/CVE-2025-3248](https://github.com/verylazytech/CVE-2025-3248)
- [Praison001/CVE-2025-3248](https://github.com/Praison001/CVE-2025-3248)
- [vigilante-1337/CVE-2025-3248](https://github.com/vigilante-1337/CVE-2025-3248)
- [Vip3rLi0n/CVE-2025-3248](https://github.com/Vip3rLi0n/CVE-2025-3248)
- [tiemio/RCE-CVE-2025-3248](https://github.com/tiemio/RCE-CVE-2025-3248)
- [ynsmroztas/CVE-2025-3248-Langflow-RCE](https://github.com/ynsmroztas/CVE-2025-3248-Langflow-RCE)
- [imbas007/CVE-2025-3248](https://github.com/imbas007/CVE-2025-3248)
- [0xgh057r3c0n/CVE-2025-3248](https://github.com/0xgh057r3c0n/CVE-2025-3248)
- [zapstiko/CVE-2025-3248](https://github.com/zapstiko/CVE-2025-3248)
- [Ashwesker/Ashwesker-CVE-2025-3248](https://github.com/Ashwesker/Ashwesker-CVE-2025-3248)
- [0-d3y/langflow-rce-exploit](https://github.com/0-d3y/langflow-rce-exploit)
- [dennisec/CVE-2025-3248](https://github.com/dennisec/CVE-2025-3248)
- [dennisec/Mass-CVE-2025-3248](https://github.com/dennisec/Mass-CVE-2025-3248)
- [ill-deed/Langflow-CVE-2025-3248-Multi-target](https://github.com/ill-deed/Langflow-CVE-2025-3248-Multi-target)
- [r0otk3r/CVE-2025-3248](https://github.com/r0otk3r/CVE-2025-3248)
- [min8282/CVE-2025-3248](https://github.com/min8282/CVE-2025-3248)
- [EQSTLab/CVE-2025-3248](https://github.com/EQSTLab/CVE-2025-3248)
- [wand3rlust/CVE-2025-3248](https://github.com/wand3rlust/CVE-2025-3248)
- [drackyjr/cve-2025-3248-exploit](https://github.com/drackyjr/cve-2025-3248-exploit)
- [b0ySie7e/CVE-2025-3248-POC](https://github.com/b0ySie7e/CVE-2025-3248-POC)