CVE report
CVE-2025-3248criticalKEV
Langflow AI - Unauthenticated Remote Code Execution
Events 90d
95
Distinct IPs
12
Severity
critical
CISA KEV
Actively exploited
Detection signature
An event counts toward CVE-2025-3248 when its URL path contains any of these (case-insensitive). This is what our matching is based on.
- · /api/v1/validate/code
Pre-disclosure activity
all early actors →Analysing probe history around the publication date…
Recent probe volume (last 7 days)
peak: 14 events/dayeventsdistinct IPs
Downloads & integrations
Top sources probing for CVE-2025-3248
- 94.154.43.1045 eventsThe Netherlands· Storm Industries LLC
- 194.110.87.21614 eventsBulgaria· DA International Group Ltd.
- 185.242.3.58 eventsThe Netherlands· Netiface America, Inc.
- 94.154.43.507 eventsThe Netherlands· Storm Industries LLC
- 45.225.135.186 eventsPanama· RACK SPHERE HOSTING S.A.
- 45.205.1.805 eventsBrazil· Vpsvault.host Ltd
- 192.142.28.773 eventsThe Netherlands· Hostpalace Datacenters Ltd
- 64.89.163.223 eventsUnited Kingdom· Netiface America, Inc.
- 101.36.125.581 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 31.77.227.1111 eventsUnited States· Banatsync Srl
- 85.11.167.2031 eventsThe Netherlands· TechTies Inc.
- 217.60.195.1461 eventsUnited Arab Emirates· LINQ TELECOMUNICACOES
Top networks the attempts come from
- AS219502 Storm Industries LLC2 IPs · 52 ev
- AS203380 DA International Group Ltd.1 IPs · 14 ev
- AS401626 Netiface America, Inc.2 IPs · 9 ev
- AS64107 RACK SPHERE HOSTING S.A.1 IPs · 6 ev
- AS215925 Vpsvault.host Ltd1 IPs · 5 ev
- AS60064 Hostpalace Datacenters Ltd1 IPs · 3 ev
- AS60223 Netiface Limited1 IPs · 2 ev
- AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED1 IPs · 1 ev
- AS197170 TechTies Inc.1 IPs · 1 ev
- AS266539 LINQ TELECOMUNICACOES1 IPs · 1 ev
Fingerprints of the clients exploiting this
The HTTP (JA4H) and TLS (JA4) fingerprints seen on these attempts. Click one to see the whole population that carries it.
Sample request paths observed
- /api/v1/validate/code