{"cve_id":"CVE-2025-3248","title":"Langflow AI - Unauthenticated Remote Code Execution","severity":"critical","actively_exploited":true,"patterns":["/api/v1/validate/code"],"events":95,"unique_ips":12,"actors":[{"ip":"94.154.43.10","events":45,"country_code":"NL","country":"The Netherlands","org":"Storm Industries LLC","rdns":"","scanner_tag":null},{"ip":"194.110.87.216","events":14,"country_code":"BG","country":"Bulgaria","org":"DA International Group Ltd.","rdns":"","scanner_tag":null},{"ip":"185.242.3.5","events":8,"country_code":"NL","country":"The Netherlands","org":"Netiface America, Inc.","rdns":"","scanner_tag":null},{"ip":"94.154.43.50","events":7,"country_code":"NL","country":"The Netherlands","org":"Storm Industries LLC","rdns":"","scanner_tag":null},{"ip":"45.225.135.18","events":6,"country_code":"PA","country":"Panama","org":"RACK SPHERE HOSTING S.A.","rdns":"","scanner_tag":null},{"ip":"45.205.1.80","events":5,"country_code":"BR","country":"Brazil","org":"Vpsvault.host Ltd","rdns":"","scanner_tag":null},{"ip":"192.142.28.77","events":3,"country_code":"NL","country":"The Netherlands","org":"Hostpalace Datacenters Ltd","rdns":"hosted-by.host-palace.com","scanner_tag":null},{"ip":"64.89.163.22","events":3,"country_code":"GB","country":"United Kingdom","org":"Netiface America, Inc.","rdns":"","scanner_tag":null},{"ip":"101.36.125.58","events":1,"country_code":"HK","country":"Hong Kong","org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","rdns":"","scanner_tag":null},{"ip":"31.77.227.111","events":1,"country_code":"US","country":"United States","org":"Banatsync Srl","rdns":"","scanner_tag":null},{"ip":"85.11.167.203","events":1,"country_code":"NL","country":"The Netherlands","org":"TechTies Inc.","rdns":"","scanner_tag":null},{"ip":"217.60.195.146","events":1,"country_code":"AE","country":"United Arab Emirates","org":"LINQ TELECOMUNICACOES","rdns":"","scanner_tag":null}],"top_asns":[{"asn":219502,"org":"Storm Industries LLC","events":52,"ips":2},{"asn":203380,"org":"DA International Group Ltd.","events":14,"ips":1},{"asn":401626,"org":"Netiface America, Inc.","events":9,"ips":2},{"asn":64107,"org":"RACK SPHERE HOSTING S.A.","events":6,"ips":1},{"asn":215925,"org":"Vpsvault.host Ltd","events":5,"ips":1},{"asn":60064,"org":"Hostpalace Datacenters Ltd","events":3,"ips":1},{"asn":60223,"org":"Netiface Limited","events":2,"ips":1},{"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","events":1,"ips":1},{"asn":197170,"org":"TechTies Inc.","events":1,"ips":1},{"asn":266539,"org":"LINQ TELECOMUNICACOES","events":1,"ips":1}],"fingerprints":{"ja4h":["po11nn0600_5aaf82b7b36c","po11nn0700_eb337fce9879","po11nn0500_b4ba55311b46","po11nn0400_fdcc3615ee04","po11nn0700_7a7c5172e3ad"],"ja4":["t13i250900_b78ed14e2fd0_e7c285222651","t13i3111h1_e8f1e7e78f70_d41ae481755e"]},"sample_paths":["/api/v1/validate/code"],"timeline":[{"day":"2026-05-15","events":1,"ips":1},{"day":"2026-06-14","events":3,"ips":1},{"day":"2026-06-15","events":3,"ips":2},{"day":"2026-06-16","events":1,"ips":1},{"day":"2026-06-18","events":1,"ips":1},{"day":"2026-06-20","events":1,"ips":1},{"day":"2026-06-21","events":2,"ips":1},{"day":"2026-06-22","events":1,"ips":1},{"day":"2026-06-27","events":5,"ips":1},{"day":"2026-07-05","events":2,"ips":1},{"day":"2026-07-06","events":4,"ips":1},{"day":"2026-07-09","events":3,"ips":1},{"day":"2026-07-14","events":1,"ips":1},{"day":"2026-07-15","events":12,"ips":1},{"day":"2026-07-16","events":2,"ips":1},{"day":"2026-07-18","events":10,"ips":1},{"day":"2026-07-19","events":14,"ips":1},{"day":"2026-07-20","events":12,"ips":1},{"day":"2026-07-21","events":4,"ips":1},{"day":"2026-07-25","events":3,"ips":1},{"day":"2026-07-26","events":9,"ips":3},{"day":"2026-07-27","events":1,"ips":1}],"window_hours":2160}