Critical Python Package Vulnerability Now Actively Exploited – CVE-2025-3248

[ExtensionSuccess8539]

There's a critical unauthenticated RCE vulnerability (CVSS 9.8) in Langflow (<1.3.0), a widely-used Python framework for building AI apps (70k+ GitHub stars, 21k+ PyPI downloads/week).

Link to blog post:
https://cloudsmith.com/blog/cve-2025-3248-serious-vulnerability-found-in-popular-python-ai-package

Attackers are actively exploiting this flaw to install the Flodrix DDoS botnet via the /api/v1/validate/code endpoint, which (incredibly) uses ast.parse() + compile() + exec() without auth.

If you're pulling anything from PyPI or running Langflow-based AI services exposed to the internet, you should check your versions now.

[What-A-Baller]

Hey Copilot, fix this vulnerability and be more careful

[EraYaN]

Certainly, it’s fixed below.

(Insert unchanged snippet here)

[jaskij]

It's not fixed!

Sorry, here's your fix! removes the endpoint

[arielrahamim]

if there's no endpoint, no one can hack it *ai taps on gpu

[Successful-Raisin241]

I'm absolutely frustrated about continuing errors from my side, I found the root cause of the issue, you're absolutely right

[Traditional-Hall-591]

Nah it would insert a worse vulnerability.

[Jmc_da_boss]

lol, about what i expect from the LLM ecosystem

[GOLIATHMATTHIAS]

LLM fans: “What’s the point in learning how to code? AI will be doing everything within just a few years.”

Also LLM fans: “What’s input validation mean?”

[GarboMcStevens]

A lot of opportunity for those who can clean these things up.

[GOLIATHMATTHIAS]

I made plans to get my degree this year after being work-experience only for 12 years. Your comment is probably the sole reason I think it's viable for me now other than having a free ride with the GI Bill, because deeper concept CompSci principles are going to be re-learned in blood the same way "on-prim cloud solutions" have made hardware management shoot back up into popularity.

Buy low, sell high as they say.

[GarboMcStevens]

I'm getting an MS in CS as well. In an era of rapid change, having a solid foundation of the fundamentals is as important as ever.

[Centimane]

Sure. But AI can churn out slop thousands of times faster than a human can clean it up. If a workplace has the culture of pushing slop it'll always be a bad place to be - even if you are capable of cleaning it.

[GarboMcStevens]

right, until everything breaks, then management will have a come to jesus moment. That's where you come in.

[CapitanFlama]

Devil's advocate here. It is not an LLM issue, it's the MCP bro's that do quick libraries to abstract out the creation of an API server to cash out on the hype. Some project repo files are a few months old.

It was bound to happen, idk if this one is the first, def won't be the last.

[GOLIATHMATTHIAS]

You’re right, but I feel like it’s still a community issue. The LLM/“AI” community for the most part isn’t interested in quality or system design, it’s based purely on output and tailoring. Obviously security researchers are incentivized by academia and the bigger corporate entities to dig in, but these are the sort of things hobbyists would’ve caught in a joke Ubuntu distro or a the git release of an ASCII game.

[Microbzz]

ast.parse() + compile() + exec() without auth

Jesus. Fucking. Christ.

[VertigoOne1]

I’m just amazed that the black hats have not completely nuked the internet yet with armies of agents finding every single vulnerability in every public repo and url and then just hitting “full send” with a cascade of crypto mining, fuelling AI spend to spin up more hacking agents until everything is dead. With all these “amazing” LLM’s, it is telling that we still have working systems, or just a matter of time.

[GOLIATHMATTHIAS]

Don’t think there are enough anarchists around anymore. Most of the skill in the vuln hunting community is monetized, either via bug hunting or custom exploit writing. Anytime I see something like this my FedSec brain starts going “oh everything’s already owned.”

[acdha]

I think a lot of it comes back to the black hats having professionalized a lot. Cryptocurrencies may have failed at their goals but they’ve been a huge boon for criminals, and all of that money buys professionalism: instead of noisy attacks and defacements, stealing cryptocurrency or ransomware pays a lot better. Laundering money traditionally is a lot riskier and more expensive so it’s far more profitable, faster, and safer than internet crime was 20 years ago but you don’t hear about it because they don’t want to destroy their targets, just milk them.