AIThe Hacker Newsabout 2 hours ago
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
1 min read
Sysdig found the first ransomware attack run entirely by an AI agent, named JADEPUFFER. The agent exploited CVE-2025-3248, a missing-authentication flaw in Langflow, to break in, steal credentials, and encrypt a production database. The flaw was fixed in Langflow 1.3.0 but many servers remain unpatched.
Level
Hype check
Tap to vote and see what everyone thinks.
