Executive Summary
The NadMesh Go botnet hunts exposed AI services, ComfyUI, Ollama, n8n, Open WebUI, Langflow and Gradio, for cloud keys and Kubernetes tokens; its dashboard claims 3,811 unique AWS keys.
What Happened
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys. A Shodan harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n, Open WebUI, Langflow, and Gradio: the image generators, local model runners, and workflow builders that teams stand up fast and firewall late. The intel feed behind that counter
Affected Products
- ComfyUI
- Ollama
- n8n
- Open WebUI
- Langflow
- Gradio
Vulnerability / Attack Technique
Scanning exposed AI services for credentials
Technical Mechanism
A Shodan harvester feeds targets; the botnet extracts cloud keys and Kubernetes tokens from exposed AI tools.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
AI tools stood up quickly and firewalled late are being harvested at scale. RealGround analysis: none of these tools should be internet-facing without authentication.
Recommended Controls
- Take ComfyUI, Ollama, n8n, Open WebUI, Langflow and Gradio off the internet
- Rotate cloud keys stored on these hosts
- Scope Kubernetes tokens
Related RealGround Service
Secure AI Agent Build · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/07/new-nadmesh-botnet-hunts-exposed-ai.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.