Signalis
sign in--:--:--UTC
CVEs

CVE-2025-3248

exploited in the wild☆ pin
CVSS
9.8
Reports
16
First seen
Jun 10, 2026
Last seen
Sep 28, 2026
Affected product

Langflow

Associated actors

JADEPUFFER ×10UAT-7810 ×2Clop ×1Cloud Atlas ×1CL-STA-1114 ×1Dysphoria ×1Lone operator (45.207.216.55) ×1MuddyWater ×1Qilin ×1ShinyHunters ×1TA488 ×1The Gentlemen ×1Armored Likho ×1UNK_MassTraction ×1Cavern Manticore ×1

Recent reports

High

JADEPUFFER Attackers Use Compromised Azure Service Principals for Destructive Operations

The Hacker NewsCritical

Threat Actors Exploit Critical Langflow and Rails Flaws for Credential Harvesting and C2 Activity

The Hacker NewsCritical

July 2026 CVE Landscape: 85 High-Impact Vulnerabilities Actively Exploited

Recorded Future InsiktHigh

The First Autonomous Ransomware Case: JADEPUFFER AI-Driven Intrusion

Trend Micro ResearchCritical

CISA Orders Urgent Patching of Actively Exploited Langflow RCE Flaw CVE-2026-0770

Bleeping ComputerHigh

JADEPUFFER Deploys ENCFORGE Ransomware Targeting AI Model Files via Langflow RCE

The Hacker NewsHigh

JadePuffer agentic AI agent upgraded with EncForge ransomware targeting AI model data

Bleeping ComputerHigh

Check Point Threat Intelligence Report – 13 July 2026

Check Point ResearchCritical

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog

The Hacker NewsHigh

Sysdig documents first agentic ransomware campaign by JadePuffer

CyberScoopHigh

JadePuffer ransomware conducted entirely by autonomous LLM agent

Bleeping ComputerHigh

Avalon Malware Framework with CrownX Ransomware Discovered in Phishing Campaigns

The Hacker NewsHigh

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

The Hacker NewsHigh

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

The Hacker NewsHigh

CVE-2026-33017 Langflow RCE Exploited for Monero Cryptomining Campaign

Trend Micro ResearchHigh

Path traversal flaw in Langflow AI platform actively exploited

Bleeping Computer

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans