🔴 CVE-2025-34291

Exploitation Status and Evidence

• Active Exploitation: The vulnerability has been observed being exploited in the wild, with activity first detected on January 23, 2026 ^[1].
• CISA KEV Status: As of May 2026, the vulnerability has not been added to the CISA Known Exploited Vulnerabilities (KEV) catalog, though it was anticipated that such an inclusion would occur following the initial discovery of the campaign ^[1].
• Targeted Attacks: While the vulnerability is being actively exploited, the exact scale and nature of the campaign remain difficult to confirm due to the specific mechanics of the exploit, which often involve redirecting traffic through user-initiated actions ^[1].

Technical Details and Attack Vectors

• Root Cause: The vulnerability stems from a flaw in the Cross-Site Request Forgery (CSRF) protection mechanisms within the default configuration of LangFlow ^[1].
• Exploitation Method: Threat actors leverage this CSRF weakness to execute unauthorized commands. Because the vulnerability relies on user interaction, the IP addresses observed during exploitation attempts often correspond to the victims who have been deceived by the attackers' ruse rather than the attackers' own infrastructure ^[1].
• Internet-Facing Exposure: Given that LangFlow is an AI framework often deployed in accessible environments, applications or services using the default configuration are susceptible to these attacks if they are exposed to the internet ^[1].