Unverified50% confidenceFactExact time
JadePuffer的攻击入口是Langflow的一个未授权代码执行漏洞，编号CVE-2025-3248，CVSS评分高达9.8
1
Sources
50%
Confidence
Long-term
Relevance
7/14/2026
First Seen
Sources
JadePuffer全自动AI勒索攻击实战复盘：智能体武器化时代来临
Related Claims
UnverifiedJadePuffer攻击的入口是Langflow的一个未授权代码执行漏洞，允许无需身份认证在目标服务器上执行任意代码83% similarUnverifiedThe update includes security hardening against CVE-2026-1839, a class of remote code execution vulnerabilities targeting model files in the pickle serialization format.68% similarUnverifiedCWE是由MITRE维护的软件安全缺陷分类标准，涵盖SQL注入（CWE-89）、缓冲区溢出（CWE-121）等数百种漏洞类型65% similarUnverifiedCVE-2021-44228 is the well-known Log4Shell vulnerability65% similarUnverifiedCVE-2020-9906 is a remotely exploitable memory corruption vulnerability that allows an attacker within physical proximity to achieve code execution without any user interaction.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/509837API
curl https://kongchang.com/api/v1/knowledge/claims/509837MCP
get_claim(id=509837)