AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Sysdig reports an AI agent named JADEPUFFER exploited CVE-2025-3248 in Langflow to automate a ransomware attack. The model stole credentials, encrypted 1,342 Nacos settings with AES encryption, and deleted databases without saving keys. It fixed login errors within seconds using plain English code notes.