'Easily Exploitable' Langflow Vulnerability Requires Immediate Patching

A critical unauthenticated code-injection remote code execution vulnerability (CVE-2025-3248, CVSS 9.8) affecting Langflow versions prior to 1.3.0 allows attackers to execute arbitrary Python code via the /api/v1/validate/code endpoint by invoking exec() on user-supplied input; Horizon3 published a PoC, researchers observed exploit activity in April, and CISA added the vulnerability to its KEV — administrators should update to Langflow 1.3.0 and avoid exposing development AI tools to the Internet.