AI agent JADEPUFFER ran first known ransomware via Langflow bug

JADEPUFFER exploited CVE-2025-3248 (CVSS 9.8) in Langflow to automate reconnaissance, credential theft from AI services and cloud providers, and encryption of production databases. Human operators still chose victims and set up infrastructure (TechCrunch). A subsequent ENCFORGE variant targeted AI model weights and vector databases using stolen cloud credentials.