CVE-2025-34291 - Vulnerability Details

Related Threat Clusters

• Critical CVE-2025-34291 in Langflow AI Agent Under Active Exploitation

  CVE-2025-34291 is a critical vulnerability affecting Langflow, an open-source AI agent platform, allowing attackers to take over accounts and execute arbitrary code. Disclosed on December 5, 2025, this vulnerability has…

  47 articles · Updated May 30, 2026
• Iranian APT Groups Target Israeli Organizations with Modular C2 Frameworks

  In 2026, Iranian APT groups, notably Cavern Manticore and OilRig, have intensified cyber operations against Israeli organizations, primarily in the IT and government sectors. Cavern Manticore employs a modular…

  10 articles · Updated July 6, 2026
• Critical RCE Vulnerability Discovered in Flowise's MCP Implementation

  Obsidian Security identified a critical one-click remote code execution (RCE) vulnerability in Flowise (CVE-2026-40933), affecting self-hosted deployments. The flaw allows attackers to execute arbitrary server-side code…

  2 articles · Updated June 1, 2026
• Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

  BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…

  632 articles · Updated February 9, 2026

Recent Intelligence Reports

• Active Exploitation Alert: Iranian Cavern Manticore APT Abuses SysAid Supply Chain ... — Rescana · July 7, 2026
• When Is Stdio Mcp Actually A Vulnerability — www.obsidiansecurity.com · June 1, 2026
• CVE-2025-34291: Langflow AI Agent Account Takeover and Remote Code Execution — Integsec · May 30, 2026
• Critical Vulnerability in Langflow — Csa.Sg · May 29, 2026
• CISA adds Trend Micro Apex One and Langflow flaws to exploited vulnerabilities catalog — Scworld · May 22, 2026
• Vulnerabilities in Trend Micro Apex One and Langflow under attack — Heise.De · May 22, 2026

Related Entities