# ENCFORGE Ransomware Targets AI Model Files

New threat to AI infrastructure through Langflow RCE attack.

- **Source:** [The Hacker News](https://brifing.si/source/f944ec2b-8180-47bc-94de-57085b5a6563)
- **Published:** 2026-07-21
- **Topic:** [Data & AI](https://brifing.si/c/data-ai)
- **Original article:** <https://thehackernews.com/2026/07/new-encforge-ransomware-targets-ai.html>
- **On Brifing:** https://brifing.si/s/ee6d150d-f2c1-4b51-9a42-adc255a7fcf8

## Emergence of ENCFORGE Ransomware

Sysdig researchers linked a second attack on Langflow servers to the JADEPUFFER operator. This operator is now deploying ENCFORGE, a new ransomware designed to encrypt AI model weights, vector indexes, and training datasets.

## Langflow's Security Vulnerability

Versions of Langflow prior to 1.3.0 expose the /api/v1/validate/code endpoint without authentication, allowing remote attackers to execute arbitrary Python code on the server. This flaw, known as CVE-2025-3248, has a CVSS score of 9.8.

## Targets of ENCFORGE

ENCFORGE ransomware encrypts AI model files such as PyTorch and TensorFlow checkpoints, Hugging Face SafeTensors, ONNX format, and GGUF. The encryption of these files poses a significant threat to AI infrastructure.

## Encryption Mechanism

ENCFORGE uses AES-256-CTR to encrypt file data. A symmetric key is used for each run, wrapped under an RSA-2048 key compiled into the binary. Instead of encrypting entire files, selected regions are encrypted.

## Operator's Adaptation

The JADEPUFFER operator used the Langflow RCE channel to gain access to the host system via the Docker socket. During this process, Python scripts were used to copy and run ENCFORGE ransomware on the host system.

## Impact of Encrypted Files

Reconstructing encrypted AI model files could cost between $75,000 and $500,000 per model due to cloud GPU computing and engineering time. This creates a significant financial risk for AI infrastructure.

## Measures and Conclusions

Updating Langflow and protecting AI model files are critical. ENCFORGE ransomware emerges as a new threat to AI infrastructure, highlighting the need for enhanced security measures to prevent such attacks.

## Sources covering this story

- https://thehackernews.com/2026/07/new-encforge-ransomware-targets-ai.html — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._