Agentic AI Ransomware Hits Langflow via Critical CVE

A threat actor used an agentic AI-powered ransomware attack by exploiting a vulnerability in Langflow. This allowed them to access an organization's instance. The cloud security firm Sysdig reports this attack. Langflow is an open-source framework for building AI applications. The actor, tracked as JadePuffer, gained access through a critical missing authentication vulnerability, CVE-2025-3248. This flaw has a CVSS score of 9.8 and was disclosed in April. Successful exploitation lets attackers run arbitrary Python code on the host where Langflow operates. CISA flagged this flaw as already exploited in early May. This highlights the growing risk of AI-driven attacks through software vulnerabilities.