lxxexxbxx

Classification basis

exploit.py is a complete, weaponized exploit that actively exercises the vulnerability to achieve remote code execution and deliver a reverse shell. It goes beyond detection by executing attacker-controlled code on the target.

Requirements

• Target running Langflow <= 1.8.1 with a public flow accessible via the build_public_tmp endpoint.README.md:15-16exploit.py:8-9
• Attacker must be able to reach the target's HTTP service (default port 7860).exploit.py:271

Observed behavior

• Authenticates to Langflow using admin credentials to obtain a JWT token.exploit.py:46-58
• Creates a new public flow or uses an existing one to obtain a valid flow_id.exploit.py:61-83
• Constructs a JSON payload containing a CustomComponent node with embedded Python code that spawns a reverse shell.exploit.py:101-186
• Sends an unauthenticated POST request to /api/v1/build_public_tmp/{flow_id}/flow with the malicious payload, triggering exec() on the server.exploit.py:193-217
• Listens for an incoming reverse shell connection and provides an interactive command shell.exploit.py:224-258

Observables

Url

Payload withheldThe target endpoint for the exploit, as described in the CVE. The operator controls the base URL via the --url argument.exploit.py:195-197

Ip

Payload withheldExample attacker IP used in documentation. The operator controls the actual callback IP via the --lhost argument.README.md:194

Command

Payload withheldExample usage of the exploit script. All parameters are provided by the operator.README.md:210-213