Langflow · Langflow · CVE-2025-34291
**Name of the Vulnerable Software and Affected Versions**
Langflow versions prior to 1.7.0
**Description**
A chained issue enables account takeover and remote code execution. An overly permissive Cross-Origin Resource Sharing (CORS) configuration, where `allow origins` is set to '*' and `allow credentials` is set to `True`, combined with a refresh token cookie configured as `SameSite=None`, allows a malicious webpage to perform cross-origin requests that include credentials. This allows an attacker-controlled origin to call the refresh endpoint and obtain fresh `access token` and `refresh token` pairs for a victim session. These tokens provide access to authenticated endpoints, including built-in code-execution functionality, allowing the attacker to execute arbitrary code and achieve full system compromise. This issue has been actively exploited in the wild.
**Recommendations**
Update to a version later than 1.6.9 to resolve the issue.