CVE-2025-34291

Description

Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.

Severity scores

Each score is shown as its source gave it. They are not averaged or merged.

• 9.4CVSS 4.0, Criticalfrom the CNA (VulnCheck)CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

What to do

• Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.CISA KEV required action

Historical context and remediation

This reference retains the original CVE publication date. A recent record update does not mean a new attack occurred.

CAPEC-160 Exploit Script-Based APIs (CNA impact statement)

CAPEC-21 Exploitation of Trusted Identifiers (CNA impact statement)

Version statuses below come from the CNA. An “unaffected” version is not necessarily a currently supported release or proof of a patch date. EPSS is a dated risk estimate, not a count of historical attacks.

Read the original CVE record.

Affected products

Timeline

1. 5 Dec 2025 Published
2. 21 May 2026 CVE-2025-34291 added to CISA KEV
3. 21 May 2026 Added to the CISA KEV catalogue

Weakness

• CWE-346

References

• www.obsidiansecurity.comtechnical-descriptionexploit
• github.comproduct
• www.vulncheck.comthird-party-advisory