# Langflow vulnerabilities & exploitation **CISA KEV** · **Ransomware** > As of 2026-10-20, Threadlinqs tracks 5 Langflow CVEs, 4 in the CISA Known Exploited Vulnerabilities catalog, 2 used in ransomware campaigns, linked to 22 tracked threat campaigns and 6 named threat actors. **Data as of:** 2026-10-20 ## Exploitation timeline Threadlinqs has recorded 5 Langflow CVEs published between 2025-04-15 and 2026-03-15. The busiest month was 2026-01 (2 new CVEs). 4 of them (80%) are listed in CISA KEV, which means exploitation in the wild has been confirmed. ## Most exploited vulnerabilities Ranked with CISA KEV listings first, then EPSS exploit probability, then CVSS score. Showing 5 of 5 tracked Langflow CVEs. - [CVE-2025-3248](https://intel.threadlinqs.com/cve/CVE-2025-3248) — CRITICAL 9.8 · KEV · Ransomware · EPSS 100% · 2025-04-07 - [CVE-2025-34291](https://intel.threadlinqs.com/cve/CVE-2025-34291) — HIGH 8.8 · KEV · Ransomware · EPSS 92.8% · 2025-12-05 - [CVE-2026-0770](https://intel.threadlinqs.com/cve/CVE-2026-0770) — CRITICAL 9.8 · KEV · EPSS 63% · 2026-01-23 - [CVE-2026-33017](https://intel.threadlinqs.com/cve/CVE-2026-33017) — CRITICAL 9.8 · KEV · EPSS 24.8% · 2026-03-20 - [CVE-2026-0768](https://intel.threadlinqs.com/cve/CVE-2026-0768) — CRITICAL 9.8 · EPSS 23.2% · 2026-01-23 ## Products affected Threadlinqs normalises CPE and CNA product records across all 5 CVEs; 1 distinct Langflow product is affected. The most frequently affected: - Langflow — 5 CVEs ## Threat activity 22 tracked threat campaigns reference Langflow products or exploit Langflow CVEs: - [Q3 2026 Record Ransomware Surge: 2,627 Claimed Attacks, Qilin and The Gentlemen Lead, Clop Resurgence via PTC Windchill CVE-2026-12569](https://intel.threadlinqs.com/threat/TL-2026-3135) — HIGH — 2026-10-09 - [AI-accelerated intrusions: Microsoft 2026 Digital Defense Report on phishing, public-facing app exploitation, and AI-enabled attacker tooling (s1ngularity, PromptLock, JADEPUFFER/ENCFORGE)](https://intel.threadlinqs.com/threat/TL-2026-2880) — HIGH — 2026-10-03 - [GTIG: AI-Era Vulnerability Discovery and Exploitation Surge — In-the-Wild Exploitation of BeyondTrust CVE-2026-1731, LiteLLM CVE-2026-42271 and Langflow CVE-2026-5027](https://intel.threadlinqs.com/threat/TL-2026-2818) — CRITICAL — 2026-09-30 - [Storm-3168 (JADEPUFFER): Agentic-Driven Destructive Cloud Attacks Against Azure via Compromised Service Principals](https://intel.threadlinqs.com/threat/TL-2026-2666) — CRITICAL — 2026-09-26 - [Endor Labs Discloses 14 Critical/High Vulnerabilities Across Seven AI Orchestration Platforms (NocoBase, Flowise, Langflow, Dify, Activepieces, Kestra, Apache Airflow)](https://intel.threadlinqs.com/threat/TL-2026-2438) — CRITICAL — 2026-09-10 - [CVE-2026-0768: Critical Langflow RCE Vulnerability Under Active Exploitation](https://intel.threadlinqs.com/threat/TL-2026-2270) — CRITICAL — 2026-09-01 - [Qilin-Linked Campaign Exploits MCP Gateway and LLM Framework Flaws (CVE-2026-59822, CVE-2026-42271, CVE-2026-48710) for RCE and Cryptomining](https://intel.threadlinqs.com/threat/TL-2026-2185) — CRITICAL — 2026-08-28 - [CVE-2026-34486: Apache Tomcat EncryptInterceptor Bypass Actively Exploited in SnowLight and AI-Assisted Campaigns](https://intel.threadlinqs.com/threat/TL-2026-1885) — HIGH — 2026-08-05 - [AI Agent Identities Emerge as the Enterprise's Fastest-Growing Attack Surface: OAuth Tokens, Shadow AI, and AI-Driven EDR Evasion (STAC6994, UNC6395, NadMesh)](https://intel.threadlinqs.com/threat/TL-2026-1686) — MEDIUM — 2026-07-25 - [CISA Orders Federal Agencies to Patch Actively Exploited Langflow RCE Flaw (CVE-2026-0770)](https://intel.threadlinqs.com/threat/TL-2026-1618) — CRITICAL — 2026-07-22 - [Langflow CVE-2025-3248 Unauthenticated RCE Exploited to Build Custom Gafgyt/BASHLITE DDoS Botnet](https://intel.threadlinqs.com/threat/TL-2026-1328) — CRITICAL — 2026-07-14 - [CVE-2025-3248 & CVE-2026-5027: Langflow RCE and Path Traversal Chained for Flodrix Botnet Deployment](https://intel.threadlinqs.com/threat/TL-2026-1247) — CRITICAL — 2026-07-12 - [JADEPUFFER: AI Agent Exploits Langflow RCE (CVE-2025-3248) to Automate Database Ransomware/Extortion Attack](https://intel.threadlinqs.com/threat/TL-2026-1117) — CRITICAL — 2026-07-05 - [JADEPUFFER Agentic Ransomware: Autonomous LLM Agent Exploits Langflow (CVE-2025-3248) and Nacos (CVE-2021-29441) for End-to-End Database Extortion](https://intel.threadlinqs.com/threat/TL-2026-1102) — CRITICAL — 2026-07-04 - [JADEPUFFER: First End-to-End Agentic Ransomware Attack Exploiting Langflow (CVE-2025-3248) and Nacos (CVE-2021-29441)](https://intel.threadlinqs.com/threat/TL-2026-1083) — CRITICAL — 2026-07-02 - [JADEPUFFER Agentic Ransomware Exploits Langflow CVE-2025-3248 and Nacos CVE-2021-29441 via Base64-Encoded Python Payloads](https://intel.threadlinqs.com/threat/TL-2026-1116) — CRITICAL — 2026-07-02 - [JADEPUFFER: Agentic (LLM-Driven) Ransomware Automating Database Extortion via Langflow RCE (CVE-2025-3248) and Nacos Auth Bypass (CVE-2021-29441)](https://intel.threadlinqs.com/threat/TL-2026-1044) — CRITICAL — 2026-07-01 - [Langflow CVE-2026-33017 Unauthenticated RCE Actively Exploited for Monero Mining (lambsys)](https://intel.threadlinqs.com/threat/TL-2026-1002) — CRITICAL — 2026-06-30 - [CISA KEV (2026-05-21): CVE-2025-34291 Langflow CORS Token Hijack-to-RCE & CVE-2026-34926 Trend Micro Apex One On-Premise Directory Traversal](https://intel.threadlinqs.com/threat/TL-2026-0551) — CRITICAL — 2026-05-21 - [NATS-as-C2: KeyHunter Distributed Worker Botnet Harvests Cloud Credentials and AI API Keys via Langflow RCE (CVE-2026-33017)](https://intel.threadlinqs.com/threat/TL-2026-0514) — HIGH — 2026-05-14 - [CVE-2026-44338 PraisonAI Unauthenticated API Bypass — Active Exploitation Within 4 Hours of Disclosure (Sysdig TRT)](https://intel.threadlinqs.com/threat/TL-2026-0502) — HIGH — 2026-05-12 - [CVE-2026-33017: Langflow Unauthenticated RCE via Public Flow Build Endpoint — Active Exploitation Within 20 Hours](https://intel.threadlinqs.com/threat/TL-2026-0250) — CRITICAL — 2026-03-19 ## Threat actors targeting Langflow Named threat actors attributed to campaigns that involve Langflow products or CVEs, with the number of linked campaigns: - [JADEPUFFER](https://intel.threadlinqs.com/actor/JADEPUFFER) — 5 campaigns - [Clop](https://intel.threadlinqs.com/actor/Clop) — 1 campaign - [Qilin](https://intel.threadlinqs.com/actor/Qilin) — 1 campaign - [The Gentlemen](https://intel.threadlinqs.com/actor/The%20Gentlemen) — 1 campaign - [UNC5174](https://intel.threadlinqs.com/actor/UNC5174) — 1 campaign - [UNC6395](https://intel.threadlinqs.com/actor/UNC6395) — 1 campaign ## How to prioritise Langflow patching This order follows the data Threadlinqs holds for Langflow, not a generic severity checklist: - 4 of 5 Langflow CVEs (80%) are in CISA KEV: treat them as actively exploited and remediate them first, starting with [CVE-2025-3248](https://intel.threadlinqs.com/cve/CVE-2025-3248), [CVE-2025-34291](https://intel.threadlinqs.com/cve/CVE-2025-34291), [CVE-2026-0770](https://intel.threadlinqs.com/cve/CVE-2026-0770). - 2 CVEs are known to be used in ransomware campaigns; patch these ahead of other KEV entries on internet-facing systems. - Outside KEV, the highest EPSS scores are [CVE-2026-0768](https://intel.threadlinqs.com/cve/CVE-2026-0768) (23.2%). - 4 CVEs score Critical and 1 High on CVSS v3 (maximum 9.8, average 9.6); sequence these after KEV and high-EPSS items. - 5 CVEs have a public exploit or proof of concept recorded, which shortens the time from disclosure to attack. ## About this data Vendor attribution comes from the CNA and CPE product records of each CVE, folded to one vendor name; CVSS, EPSS and KEV status are read from the Threadlinqs CVE catalog; campaign and actor links come from tracked threat records. Counts reflect the data as of 2026-10-20 and refresh daily. Canonical: https://intel.threadlinqs.com/vendors/langflow All vendors: https://intel.threadlinqs.com/vendors Full detection coverage and IOCs via the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp