Expired50% confidenceFactExact time
The entry point of the JadePuffer attack is an unauthorized code execution vulnerability in Langflow, which allows arbitrary code to be executed on the target server without authentication.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/14/2026
First Seen
This claim has expired. It is kept for the record and no longer describes the current state.
Valid until: 10/12/2026(expired)
Sources
JadePuffer全自动AI勒索攻击实战复盘：智能体武器化时代来临
Related Claims
UnverifiedJadePuffer的攻击入口是Langflow的一个未授权代码执行漏洞，编号CVE-2025-3248，CVSS评分高达9.883% similarUnverifiedJadePuffer ultimately encrypted 1,342 service configuration files, deleted the original files, and left a table named README_RANSOM in the database with a Bitcoin payment address.66% similarUnverifiedThe Log4j vulnerability (CVE-2021-44228) allows attackers to trigger a JNDI lookup via a crafted string to achieve unauthenticated remote code execution.66% similarUnverifiedThe server architecture enabled by default in OpenCode has a remote code execution vulnerability that has gone unpatched for a long time.65% similarUnverified该漏洞的技术本质是PATH劫持攻击，Cursor执行Git操作时会从项目目录中查找并调用git可执行文件65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/509480API
curl https://kongchang.com/api/v1/knowledge/claims/509480MCP
get_claim(id=509480)