CVE-2026-6543

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7271092	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:langflow:langflow_desktop:*:*:*:*:*:*:*:*

History

26 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) IBM Langflow Desktop 1.0.0 hasta 1.8.4 Langflow permite a un atacante ejecutar comandos arbitrarios con los privilegios del proceso que ejecuta Langflow. Esto permite leer variables de entorno sensibles (claves de API, credenciales de base de datos), modificar archivos o lanzar ataques adicionales en la red interna.

Information

Published : 2026-04-30 22:16

Updated : 2026-10-26 22:10

NVD link : CVE-2026-6543

Mitre link : CVE-2026-6543

CVE.ORG link : CVE-2026-6543

JSON object : View

Products Affected

langflow

langflow_desktop

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2026-6543", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6543", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-01T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:langflow_desktop:1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_desktop:1.8.4:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Langflow Desktop", "versions": [{"status": "affected", "version": "1.0.0", "versionType": "semver", "lessThanOrEqual": "1.8.4"}]}]}], "published": "2026-04-30T22:16:26.467", "references": [{"url": "https://www.ibm.com/support/pages/node/7271092", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network."}, {"lang": "es", "value": "IBM Langflow Desktop 1.0.0 hasta 1.8.4 Langflow permite a un atacante ejecutar comandos arbitrarios con los privilegios del proceso que ejecuta Langflow. Esto permite leer variables de entorno sensibles (claves de API, credenciales de base de datos), modificar archivos o lanzar ataques adicionales en la red interna."}], "lastModified": "2026-10-26T22:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:langflow:langflow_desktop:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83CB6A3F-0146-4A7A-9FDF-7F49CCBBC143", "versionEndIncluding": "1.8.4", "versionStartIncluding": "1.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}