Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

New Flodrix Botnet Variant Exploits Langflow AI Server RCE Bug to Launch DDoS Attacks

The Hacker Newsby @TheHackersNews ()2 min read2
Analyze CVE-2025-3248 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-3248
Unauthenticated RCE in Langflow /api/v1/validate/code
9.8100%KEVRansomwarePoC ×4
KEV

From the original article

2 min read at thehackernews.com

Cybersecurity researchers have called attention to a new campaign that's actively exploiting a recently disclosed critical security flaw in Langflow to deliver the Flodrix botnet malware.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.