{"uuid": "464eb411-2f12-4655-9b07-06383f51415a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3248", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1795", "content": "\ud83d\udd34 Agentic AI Used to Conduct Ransomware Attack via Langflow\n\nA threat actor exploited a vulnerability in Langflow to access an organization\u2019s instance and abuse it in an agentic ransomware attack.\n\nLangflow is a Python-based, LLM-agnostic open source framework used for building LLM-driven applications and agent workflows.\n\nAs part of the attack, a threat actor tracked as JadePuffer gained access to an internet-exposed Langflow instance through the exploitation of CVE-2025-3248 (CVSS score of 9.8), a critical missing authentication vulnerability disclosed in April.\n\nSuccessful exploitation of the bug allows attackers to execute arbitrary Python code on the host on which Langflow is running. CISA flagged the flaw as exploited in early May.", "creation_timestamp": "2026-08-23T00:00:42.285043Z"}