Unverified50% confidenceFactExact time
JadePuffer的攻击入口是Langflow的一个未授权代码执行漏洞，编号CVE-2025-3248，CVSS评分高达9.8
1
Sources
50%
Confidence
Long-term
Relevance
7/14/2026
First Seen
Sources
JadePuffer全自动AI勒索攻击实战复盘：智能体武器化时代来临
Related Claims
UnverifiedThe entry point of the JadePuffer attack is an unauthorized code execution vulnerability in Langflow, which allows arbitrary code to be executed on the target server without authentication.83% similarUnverifiedThe update includes security hardening against CVE-2026-1839, a class of remote code execution vulnerabilities targeting model files in the pickle serialization format.68% similarUnverifiedCWE是由MITRE维护的软件安全缺陷分类标准，涵盖SQL注入（CWE-89）、缓冲区溢出（CWE-121）等数百种漏洞类型65% similarUnverifiedCVE-2021-44228 is the well-known Log4Shell vulnerability65% similarUnverifiedCVE-2020-9906 is a remotely exploitable memory corruption vulnerability that allows an attacker within physical proximity to achieve code execution without any user interaction.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/509837API
curl https://kongchang.com/api/v1/knowledge/claims/509837MCP
get_claim(id=509837)