Vulnerability intelligence

CVE-2025-3248

Official description is being retrieved from NVD — refresh shortly.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.0%

Riskier than 0% of all CVEs

Exploitation

Confirmed in the wild

KEV since 2025-05-05

Remediation

Patch available

Federal deadline 2025-05-26

NVD entry Vendor patch PoC / advisory CISA KEV

2 articles across 2 outlets · first covered Jul 3, 2026 · latest Jul 3, 2026

Tracked incidents

campaign open 2 articles

AI-driven ransomware attack exploits Langflow vulnerability (CVE-2025-3248)

Associated threat actors

Coverage timeline

JADEPUFFER AI ransomware exploits Langflow flaw CVE-2025-3248
securityaffairs.com · Jul 3, 2026
Agentic AI Used to Conduct Ransomware Attack via Langflow
www.securityweek.com · Jul 3, 2026