Vulnerability intelligence
CVE-2025-3248: Langflow unauthenticated remote code execution
Hermes Agent's 'YOLO mode' ran privilege-escalation scans and file cataloging without a human approving any step.
CVSS 9.8
2025
What WebPulse reported · 2 analyses
An AI Agent Targeted Thailand's Finance Ministry — Unattended
Hermes Agent's 'YOLO mode' ran privilege-escalation scans and file cataloging without a human approving any step.
July 25, 2026
Ransomware Built to Encrypt AI Model Checkpoints Has Been Found in the Wild
Sysdig documented the first known ransomware strain targeting training data, vector databases, and model weights — deployed by an AI agent, not a person.
July 22, 2026
Related vulnerabilities