CVE-2025-3248

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• Langflow AI/Langflow2 versions

  cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*range: <1.3.0
  • (no CPE)range: 0
• ghsa-coords2 versions

  pkg:pypi/langflowpkg:pypi/langflow-base

  < 1.3.0+ 1 more

  • (no CPE)range: < 1.3.0
  • (no CPE)range: < 0.3.0

• github.com/langflow-ai/langflow/pull/6911nvdPatchWEB
• www.horizon3.ai/attack-research/disclosures/unsafe-at-any-speed-abusing-python-exec-for-unauth-rce-in-langflow-ai/nvdExploitThird Party Advisory
• github.com/advisories/GHSA-rvqx-wpfh-mfx7ghsaADVISORY
• nvd.nist.gov/vuln/detail/CVE-2025-3248ghsaADVISORY
• www.vulncheck.com/advisories/langflow-unauthenticated-rcenvdThird Party AdvisoryWEB
• github.com/langflow-ai/langflow/commit/faac4db133de32fcb6d483fa9ff52f40ce42bdc0ghsaWEB
• github.com/langflow-ai/langflow/releases/tag/1.3.0nvdRelease NotesWEB
• github.com/langflow-ai/langflow/security/advisories/GHSA-rvqx-wpfh-mfx7ghsaWEB
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government ResourceWEB
• www.horizon3.ai/attack-research/disclosures/unsafe-at-any-speed-abusing-python-exec-for-unauth-rce-in-langflow-aighsaWEB

• The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure
  Tenable Blog · Aug 15, 2026
• The Signs Were There: What the First Autonomous Ransomware Case Confirms
  Trend Micro Research · Jul 24, 2026
• CISA orders urgent action on actively exploited Langflow RCE flaw
  BleepingComputer · Jul 22, 2026
• JadePuffer returns with ransomware built to target AI models and infrastructure
  Help Net Security · Jul 21, 2026
• Agentic JADEPUFFER Exploits Langflow Flaw to Deploy ENCFORGE AI Ransomware
  Cyber Security News · Jul 21, 2026
• New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack
  The Hacker News · Jul 21, 2026
• JadePuffer agentic attacks now target AI model data with ransomware
  BleepingComputer · Jul 20, 2026
• JadePuffer Returns With Ransomware Designed to Wipe AI Models
  Infosecurity Magazine · Jul 20, 2026
• 13th July – Threat Intelligence Report
  Check Point Research · Jul 13, 2026
• CISA orders feds to prioritize patching Langflow auth bypass flaw
  BleepingComputer · Jul 8, 2026
• CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV
  The Hacker News · Jul 8, 2026
• AI Agent Pulls Off a Ransomware Attack Without Human Help
  GovInfoSecurity · Jul 6, 2026
• JadePuffer: The First Complete LLM-Driven Ransomware Attack
  Dark Reading · Jul 6, 2026
• Sysdig clocks first documented case of agentic ransomware
  CyberScoop · Jul 6, 2026
• Researchers Claim First Fully Agentic Ransomware: JadePuffer
  Infosecurity Magazine · Jul 6, 2026
• JadePuffer ransomware used AI agent to automate entire attack
  BleepingComputer · Jul 4, 2026
• New Avalon Malware Framework Packs CrownX Ransomware Capabilities
  The Hacker News · Jul 3, 2026
• Agentic AI Used to Conduct Ransomware Attack via Langflow
  SecurityWeek · Jul 3, 2026
• Smooth AI criminal drives 'first' end-to-end agentic ransomware attack
  The Register Security · Jul 2, 2026
• Agentic Ransomware JADEPUFFER Uses Base64 Python Payloads to Harvest Cloud and API Keys
  Cyber Security News · Jul 2, 2026
• AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
  The Hacker News · Jul 2, 2026
• Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
  The Hacker News · Jun 30, 2026
• From Langflow to Monero: Inside CVE-2026-33017 Cryptominer
  Trend Micro Research · Jun 23, 2026
• Path traversal flaw in AI dev platform Langflow exploited in attacks
  BleepingComputer · Jun 10, 2026