{"id":"CVE-2025-34291","aliases":["GHSA-577h-p2hh-v4mv","PYSEC-2025-78"],"url":"https://o3.security/vulnerability/CVE-2025-34291","summary":"Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE","details":"Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.","published":"2025-12-05T22:27:26.438Z","modified":"2026-10-21T02:52:52.257869907Z","cvss":null,"epss":{"score":0.83629,"percentile":0.99671,"asOf":"2026-09-16"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"langflow","fixedVersion":"1.7.0"}],"fix":{"url":"https://github.com/langflow-ai/langflow/pull/10139","label":"langflow-ai/langflow#10139"},"references":[{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-34291"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/34xxx/CVE-2025-34291.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-34291"},{"type":"ADVISORY","url":"https://www.crowdsec.net/vulntracking-report/cve-2025-34291"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/langflow-cors-misconfiguration-to-token-hijack-and-rce"},{"type":"PACKAGE","url":"https://github.com/langflow-ai/langflow"},{"type":"EVIDENCE","url":"https://www.obsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platform"},{"type":"WEB","url":"https://github.com/langflow-ai/langflow/pull/10139"},{"type":"WEB","url":"https://github.com/langflow-ai/langflow/pull/10696"},{"type":"WEB","url":"https://github.com/langflow-ai/langflow/pull/9240"},{"type":"WEB","url":"https://github.com/langflow-ai/langflow/pull/9441"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/langflow/PYSEC-2025-78.yaml"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-21T02:52:52.257869907Z"}}