High severity · published Apr 30, 2026
CVE-2026-6543
Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint
8.8
CVSS
0.5%
EPSS
No
On KEV
Description
IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LD
Langflow Desktop · IBM
1.0.0 through 1.8.4 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-6543
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-6543
Vendor Advisory
https://www.ibm.com/support/pages/node/7271092
More from Langflow Desktop
8.8
CVE-2026-3357
IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file
7.5
CVE-2026-4503
Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint
6.5
CVE-2026-3345
Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpoint
6.5
CVE-2026-3340
Server-Side Request Forgery (SSRF) in Langflow URL Component
6.5
CVE-2026-4502
Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API