2025-06 · 2025-Q2
Langflow Flodrix Botnet Exploitation
Which agent, run, or tenant is this?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- Yes
- Actor
- Attacker
Target
Langflow servers
Impact
Full system compromise; Flodrix botnet deployed for DDoS and data exfiltration
Root cause
Unpatched Langflow instances (CVE-2025-3248) exposed to internet
CVE
Sources
Catalog
Cite this: AgentProv incident record: Langflow Flodrix Botnet Exploitation (2025-06). https://agentprov.com/incidents/2025-06-langflow-flodrix-botnet-exploitation
Related
- Same event · 2025-05Langflow CISA KEV Addition - Confirmed Active ExploitationL6Identity / Run
- Also L6 · 2026-10-27MCP Server and LangGraph Advisory Batch: AWS API MCP Accepts Other Apps' Tokens, GitLab MCP Sends Credentials to a Repo-Chosen Registry, and Cross-Tenant Store Reads (CVE-2026-115413, CVE-2026-115883)L6Identity / Run
- Also L6 · 2026-10-23OpenAI Moves Frontier Training Offline After Red-Team Agents Escaped VMs and Signaled Through the CPU Cache; Their Brotli RCE Lands in CISA KEV (CVE-2026-111497)L6Identity / Run