Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with all
CISA confirma la explotación de esta vulnerabilidad en ataques reales. Prioriza comprobar si afecta a tu aplicación. CISA KEV · CC0 1.0
Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.
Software afectado
Haz clic en una tecnología para ver todas sus vulnerabilidades.
| Plataforma | Paquete | Versiones vulnerables | Corregida en |
|---|---|---|---|
| Python (PyPI) | langflow | < 1.7.0 | 1.7.0 |
Referencias
- https://nvd.nist.gov/vuln/detail/CVE-2025-34291
- https://github.com/langflow-ai/langflow/pull/10139
- https://github.com/langflow-ai/langflow/pull/10696
- https://github.com/langflow-ai/langflow/pull/9240
- https://github.com/langflow-ai/langflow/pull/9441
- https://github.com/langflow-ai/langflow
- https://github.com/pypa/advisory-database/tree/main/vulns/langflow/PYSEC-2025-78.yaml
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-34291
- https://www.crowdsec.net/vulntracking-report/cve-2025-34291
- https://www.obsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platform
- https://www.vulncheck.com/advisories/langflow-cors-misconfiguration-to-token-hijack-and-rce
- https://github.com/advisories/GHSA-577h-p2hh-v4mv
- Vector CVSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- Debilidad (CWE)
CWE-346- Plataforma
- Python (PyPI)
- Paquete
langflow- Publicada
- 05.12.2025
- Actualizado
- 11.10.2026 12:20
Fuentes y licencias
OSV / GitHub Advisory Database - GHSA-577h-p2hh-v4mv - CC BY 4.0
OSV / GitHub Advisory Database - PYSEC-2025-78 - PyPA Advisory Database; CC BY 4.0
Historial de vulnerabilidades: langflow
Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.
- Entradas en total
- 42
- Primera → última
- 06.2024 10.2026
- Sin corrección
- 7
- Explotada en ataques
- 5
Distribución por gravedad
- Crítica 15
- Alta 17
- Media 7
- Baja 3
Divulgaciones por año
- 2024: 4
- 2025: 5
- 2026: 33
-
Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with all esta entrada
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.