CVE-2025-34291

CRITICAL CISA KEV EPSS 99.5%
Published Dec 5, 20256mo ago · Modified Jun 17, 20261w ago
9.4 CVSS 4.0
Critical
Find Similar
Published Dec 5, 2025 6mo ago
Last Modified Jun 17, 2026 1w ago
KEV Listed May 21, 2026 1mo ago
KEV Due Jun 4, 2026 26d overdue

Description

Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.

CVSS Details

Base Score
9.4
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction P
Scope X

Threat Intelligence

CISA Known Exploited Overdue 26d
Added
May 21, 2026
Due
Jun 4, 2026

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

EPSS Exploit Probability
99.5% percentile
Exploit & Patch Status
Actively Exploited (KEV)
No Patch Available

Weaknesses 1

CWE-346

Affected Products 1

VendorProductVersionRange
langflowlangflow* ≤1.6.9

References 5

  • github.com https://github.com/langflow-ai/langflow
    Product
  • cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-34291
    US Government Resource
  • crowdsec.net https://www.crowdsec.net/vulntracking-report/cve-2025-34291
    Third Party Advisory
  • obsidiansecurity.com https://www.obsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platform
    ExploitMitigationThird Party Advisory
  • vulncheck.com https://www.vulncheck.com/advisories/langflow-cors-misconfiguration-to-token-hijack-and-rce
    Third Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.