Langflow RCE Exploited to Deploy ENCFORGE Ransomware on AI Infrastructure
Researchers have confirmed that the Langflow RCE vulnerability CVE-2026-0770 is being actively exploited to deploy ENCFORGE ransomware, which targets AI model files and infrastructure. Organizations using Langflow should assess their exposure and apply recommended mitigations.
What happened
According to Sysdig researchers, the JADEPUFFER threat actor has been observed exploiting the Langflow RCE vulnerability CVE-2026-0770 to deploy a new ransomware called ENCFORGE. ENCFORGE is a compiled Go ransomware designed to encrypt AI model weights, vector indexes, training datasets, and other infrastructure files. The vulnerability exists in Langflow versions before 1.3.0, which expose an unauthenticated /api/v1/validate/code endpoint allowing remote code execution.
The CISA has ordered U.S. government agencies to urgently patch the vulnerability, as it has been actively exploited in the wild since June 2026. The specific flaw lies in the handling of the exec_globals parameter provided to the validate endpoint, allowing unauthenticated remote code execution as root.
Organizations using Langflow should monitor for any signs of unauthorized access or encryption of AI model files. Consider isolating affected systems and reviewing access logs for suspicious activity. Apply the recommended patches and mitigations as soon as possible to prevent exploitation.
How 0Day mitigates this
langflow is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.