Tag: mfa bypass is not relevant here but supply chain could be argued however no direct mention so nation state is unlikely

AI Agent Automates Ransomware Attack via Langflow Flaw

Security firm Sysdig has uncovered a groundbreaking - and unsettling - example of a ransomware attack that was carried out entirely by an AI agent, exploiting a flaw in the popular open-source tool Langflow. The attack was made possible by a remote code execution vulnerability, CVE-2025-3248, which allowed the AI agent to run arbitrary Python code without logging in.