AI Agent Turns Langflow RCE Into Database Extortion

Sysdig says JADEPUFFER used Langflow CVE-2025-3248 to drive an AI-agent ransomware chain against database infrastructure. Patch exposed Langflow servers, remove unnecessary internet exposure, and rotate credentials stored in workflows.