CVE-2025-34291

Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.

• CWE-346

• https://github.com/langflow-ai/langflowProduct
• https://www.obsidiansecurity.com/blog/cve-2025-34291-critical-account-takeover-and-rce-vulnerability-in-the-langflow-ai-agent-workflow-platformExploit, Mitigation, Third Party Advisory
• https://www.vulncheck.com/advisories/langflow-cors-misconfiguration-to-token-hijack-and-rceThird Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-34291US Government Resource
• https://www.crowdsec.net/vulntracking-report/cve-2025-34291Third Party Advisory

Published

Dec 5, 2025

Last Modified

Jul 14, 2026

Status

Analyzed

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-34286Nagios XI versions prior to 2026R1 contain a remote code ex…7.2
• CVE-2025-34287Nagios XI versions prior to 2024R2 contain an improperly own…7.8
• CVE-2025-34288Nagios XI versions prior to 2026R1.1 are vulnerable to local…6.7
• CVE-2025-34289Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-3429The 3DPrint Lite plugin for WordPress is vulnerable to SQL I…4.9
• CVE-2025-34290Versa SASE Client for Windows versions released between 7.8.…7.8
• CVE-2025-34292Rox, the software running BeWelcome, contains a PHP object i…9.4
• CVE-2025-34293GN4 Publishing System versions prior to 2.6 contain an insec…8.6
• CVE-2025-34294Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-34295Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34296Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34297KissFFT versions prior to the fix commit 1b083165 contain an…8.6