CVE-2025-3248
Known exploited · CISA KEV
CVSS 9.8 CRITICAL: langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. EPSS 100% (100th percentile).
CISA federal remediation date May 26 · date passed
Threats & Adversaries
Microsoft says JadePuffer, also tracked as Storm-3168, turned an early-June Azure intrusion into an 18-hour destruction run by abusing two compromised service principals to map the tenant and target recovery controls.
The split identities mattered: one machine identity spent hours reading subscriptions, resource groups, virtual machines, and other resources, while the other carried out the deletion and credential-collection work. Because Azure treated both as approved applications, the attacker could act at machine speed and aim not just at live systems but at the backup and recovery controls meant to bring them back.
For Azure estates that rely on app registrations, service principals, or workload identities, the exposure now sits in the control plane as much as the data plane. Microsoft also ties the broader campaign to CVE-2025-3248 in Langflow, so the same actor still has a separate entry path where that app is in use.
6 sources · Sep 29
Known exploited · CISA KEV
CVSS 9.8 CRITICAL: langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. EPSS 100% (100th percentile).
CISA federal remediation date May 26 · date passed
The Register Security
JadePuffer crims hijacked Azure identities and used them to blow up cloud resources
Smells like more agentic ransomware, Redmond warns
originalDark Reading
JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.
originalBleepingComputer
JadePuffer agentic AI attacks target Azure, destroy cloud resources
The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components.
originalPart of the PlainSec briefing for 2026-09-28
Every edition of this story: JadePuffer used Azure identities to wipe recovery paths