CVE-2025-34291: Langflow Chained Account Takeover and RCE

# CVE-2025-34291: Langflow Chained Account Takeover and RCE

https://gcdradar.vercel.app/incidents/cve-2025-34291-langflow-chained-account-takeover-and-rce · AIR-2025-0035 · closed 2025-12-05

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2025-12-05
- AI role: Attack on AI
- Products: Langflow
- CVE ids: CVE-2025-34291
- CVSS: 9.4

## Summary

Langflow versions up to 1.6.9 suffer from a chained vulnerability involving CORS configuration and cookie settings. This allows cross-origin credential theft and subsequent remote code execution.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-12-06: CVE-2025-34291: Langflow CORS misconfiguration enables Account Takeover and RCE (https://github.com/advisories/GHSA-577h-p2hh-v4mv)
- 2025-12-05: CVE-2025-34291: Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code… (https://nvd.nist.gov/vuln/detail/CVE-2025-34291)

## Sources

- 2025-12-05 NVD: CVE-2025-34291: Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code… https://nvd.nist.gov/vuln/detail/CVE-2025-34291
- 2025-12-06 GitHub Advisory Database: CVE-2025-34291: Langflow CORS misconfiguration enables Account Takeover and RCE https://github.com/advisories/GHSA-577h-p2hh-v4mv

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.