Langflow spawns Python via base64-decoded payload (JADEPUFFER)

Ibrahim Saud@tektrix

•updated Sep 17, 2026•0•0•2

Detects instances where a Langflow process spawns a Python process using command-line arguments involving base64 decoding or character-based execution, which is often indicative of malicious code injection or shellcode execution.