Chained Vulnerability in Langflow AI Platform Exposes Accounts and Enables Remote Code Execution
CVE-2025-34291

9.4CRITICAL

Key Information:

Vendor: Langflow
Status: Langflow
Vendor: CVE Published:; 5 December 2025

Badges

📈 Score: 150👾 Exploit Exists🟡 Public PoC🟣 EPSS 83%🦅 CISA Reported📰 News Worthy

What is CVE-2025-34291?

CVE-2025-34291 is a critical vulnerability found in the Langflow AI Platform, impacting versions up to and including 1.6.9. This vulnerability arises from a combination of an overly permissive Cross-Origin Resource Sharing (CORS) configuration and a misconfigured refresh token cookie. The CORS settings permit any origin to access certain resources, while the SameSite attribute's configuration allows for credentialed requests from public webpages. This flaw allows malicious actors to perform cross-site requests, effectively taking over user accounts and enabling remote code execution. With these obtained tokens, attackers can access restricted endpoints of the platform, leveraging built-in functionality to execute arbitrary code. Consequently, this could lead to full system compromise, jeopardizing organizational data and infrastructure.

Potential impact of CVE-2025-34291

Account Takeover: The vulnerability allows attackers to hijack user accounts by obtaining valid access tokens. This can lead to unauthorized access to sensitive information and functionalities within the platform, compromising user privacy and operational security.
Remote Code Execution: By exploiting this vulnerability, attackers can execute arbitrary code on the server. This capability enables them to manipulate the system, deploy malware, or conduct further attacks, posing a severe risk to the integrity of organizational systems.
Full System Compromise: The chain of vulnerabilities enables complete control over the Langflow platform, which could allow attackers to manipulate workflows, disrupt services, or extract sensitive organizational data, significantly affecting business operations.

CISA has reported CVE-2025-34291

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2025-34291 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Affected Version(s)

Langflow 0 <= 1.6.9

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-34291 - Proof of Concept

CVE-2025-34291-Langflow-Scanner
Created by ridhinva