CVE-2025-3248
Known exploited · CISA KEV
CVSS 9.8 CRITICAL: langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. EPSS 100% (100th percentile).
CISA federal remediation date May 26 · date passed
Vulnerabilities · 55 days ago
Once an attacker has Langflow, cleaning the app does not protect the AI system anymore. JADEPUFFER has shifted from improvised destruction to ENCFORGE, a compiled Go ransomware payload that encrypts model weights, vector indexes, checkpoints, and training data on the host, so the real loss can be the artifacts that make the model runnable.
Sysdig says the second attack reused CVE-2025-3248 in Langflow versions before 1.3.0 to reach the server again and deploy the new locker. The old campaign used throwaway scripts against downstream data stores; this one is built to sweep through common AI file types and hit the stores where ML systems keep their working state.
If model artifacts live beside the app, patching Langflow does not restore them. Without offline backups, encrypted weights and indexes can leave the AI service permanently unrecoverable even after the entry point is fixed.
Known exploited · CISA KEV
CVSS 9.8 CRITICAL: langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. EPSS 100% (100th percentile).
CISA federal remediation date May 26 · date passed
4 sources covering this story
JadePuffer returns with ransomware built to target AI models and infrastructure - Help Net Security
The JadePuffer agentic threat actor is using ENCFORGE, novel ransomware created to target AI and machine learning (ML) infrastructure.
New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack
JADEPUFFER exploits Langflow CVE-2025-3248 to deploy ENCFORGE ransomware against AI model weights, vector indexes, and training data on the host.
JadePuffer agentic attacks now target AI model data with ransomware
The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, such as training datasets, vector databases, and model checkpoints.
JadePuffer Returns With Ransomware Designed to Wipe AI Models
JadePuffer follow-up campaign deployed ENCFORGE locker built to destroy AI model artifacts
Part of the PlainSec briefing for 2026-07-22