Expired50% confidenceFactExact time
The entry point of the JadePuffer attack is an unauthorized code execution vulnerability in Langflow, which allows arbitrary code to be executed on the target server without authentication.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/14/2026
First Seen
Valid until: 10/12/2026(expired)
Sources
JadePuffer全自动AI勒索攻击实战复盘：智能体武器化时代来临
Related Claims
UnverifiedJadePuffer的攻击入口是Langflow的一个未授权代码执行漏洞，编号CVE-2025-3248，CVSS评分高达9.883% similarUnverifiedJadePuffer ultimately encrypted 1,342 service configuration files, deleted the original files, and left a table named README_RANSOM in the database with a Bitcoin payment address.66% similarUnverifiedLog4j漏洞（CVE-2021-44228）允许攻击者通过特制字符串触发JNDI查找实现无需认证的远程代码执行66% similarUnverifiedThe server architecture enabled by default in OpenCode has a remote code execution vulnerability that has gone unpatched for a long time.65% similarUnverified该漏洞的技术本质是PATH劫持攻击，Cursor执行Git操作时会从项目目录中查找并调用git可执行文件65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/509480API
curl https://kongchang.com/api/v1/knowledge/claims/509480MCP
get_claim(id=509480)