{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2025-34291/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2025-34291/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2025-34291/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2025-34291/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2025-34291/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2025-34291/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2025-34291"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2025-34291"}},"enrichments":{"cisa-kev":{"kev":true},"epss":{"epss":0.92808,"kev":true,"percentile":0.99829},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2025/CVE-2025-34291.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2025-34291\n\ninfo:\n  name: Langflow AI <= 1.6.9 - CORS Misconfiguration\n  author: 686f6c61\n  severity: critical\n  description: |\n    Langflow AI versions 1.6.9 and earlier are vulnerable to a CORS misconfiguration that allows any origin to make credentialed requests. Combined with SameSite=None cookies, this enables cross-origin token theft and subsequent remote code execution via the /api/v1/validate/code endpoint.\n  impact: |\n    An attacker can steal authentication tokens via CORS and execute arbitrary code on the server.\n  remediation: |\n    Upgrade to Langflow version 1.7.0 or later which restricts CORS origins properly.\n  reference:\n    - https://www.obsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platform\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-34291\n    - https://github.com/langflow-ai/langflow\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H\n    cvss-score: 9.4\n    cve-id: CVE-2025-34291\n    epss-score: 0.92808\n    epss-percentile: 0.99829\n    cwe-id: CWE-942\n  metadata:\n    verified: true\n    max-request: 2\n    vendor: langflow-ai\n    product: langflow\n    shodan-query: html:\"Langflow\"\n    fofa-query: body=\"Langflow\"\n  tags: cve,cve2025,langflow,cors,misconfig,vuln,oss,vkev,kev\n\nflow: http(1) && http(2)\n\nhttp:\n  - raw:\n      - |\n        GET / HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"Langflow\"\n        internal: true\n\n  - raw:\n      - |\n        OPTIONS /api/v1/refresh HTTP/1.1\n        Host: {{Hostname}}\n        Origin: https://scanme.sh\n        Access-Control-Request-Method: POST\n        Access-Control-Request-Headers: content-type\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: header\n        words:\n          - \"Access-Control-Allow-Origin: https://scanme.sh\"\n          - \"Access-Control-Allow-Credentials: true\"\n        condition: and\n\n      - type: status\n        part: header\n        status:\n          - 200\n# digest: 490a0046304402200c4bf4998d86f6edded93f4dd711dfba5f628cf53b46c949fbc7146aa72a61e002206ea43beb79ccba50150fae7341735fa49666fc7e9a190c89b4e469d3e59cba7b:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2025-34291"}