Sysdig TRT documented JADEPUFFER (July 1, 2026) — assessed as first end-to-end agentic ransomware driven by an LLM agent without human at keyboard. Initial access: CVE-2025-3248 on internet-exposed Langflow. Agent pivoted to production MySQL/Nacos server, encrypted 1,342 configuration items.
Attack chain: Langflow RCE → credential harvest (cloud/LLM API keys) → Nacos pivot (CVE-2021-29441, default JWT key) → MySQL AES_ENCRYPT extortion. Agent self-corrected failed login in 31 seconds. 600+ payloads contained LLM-style:language reasoning comments. Encryption keys not stored — recovery impossible even with payment.
Defensive checklist: patch Langflow ≥1.3.0; restrict /api/v1/validate/code; rotate Nacos default JWT; segment AI tooling from production.